avatar CSBox Pro Aug 31. 2010. 4:10 pm
Any ideas on this?

Partial wording from the error we received:

Error (InvalidParamError)
'../../../../../../../../../../../../../../../proc/self/environ ' is not a valid module name
Error params:
File: NULL
Line: NULL
Variable name: module
Variable value: ../../../../../../../../../../../../../../../proc/self/environ
Backtrace:
#0 Error->__construct('../../../../../../../../../../../../../../../proc/self/environ ' is not a valid module name, 1) called at [/var/www/vhosts/creativesoapbox.com/subdomains/platform/httpdocs/activecollab/angie/classes/errors/InvalidParamError.class.php:46]
#1 InvalidParamError->__construct(module, ../../../../../../../../../../../../../../../proc/self/environ , '../../../../../../../../../../../../../../../proc/self/environ ' is not a valid module name, 1) called at [/var/www/vhosts/creativesoapbox.com/subdomains/platform/httpdocs/activecollab/angie/classes/Request.class.php:50]
#2 Request->__construct(homepage, Array ([module] => ../../../../../../../../../../../../../../../proc/self/environ ,[action] => DetailView)) called at [/var/www/vhosts/creativesoapbox.com/subdomains/platform/httpdocs/activecollab/angie/classes/router/Route.class.php:141]
#3 Route->match(, action=DetailView&module=../../../../../../../../../../../../../../../proc/self/environ%00) called at [/var/www/vhosts/creativesoapbox.com/subdomains/platform/httpdocs/activecollab/angie/classes/router/Router.class.php:96]
#4 Router->match(, action=DetailView&module=../../../../../../../../../../../../../../../proc/self/environ%00) called at [/platform/httpdocs/activecollab/angie/classes/application/AngieApplication.class.php:92]
#5 AngieApplication->handleHttpRequest() called at [/platform/httpdocs/activecollab/init.php:92]
#6 require_once(/platform/httpdocs/activecollab/init.php) called at [/platform/httpdocs/public/index.php:49]
Autoglobal varibles:
$_GET: empty
$_POST: empty
$_COOKIE: empty
$_SESSION: empty
avatar Ilija Studen Staff Sep 1. 2010. 12:33 am
Hello,

It appears that someone is probing your system and trying to find an exploit.

activeCollab checks input parameters and completely rejects the request because it's not valid, so you're covered there. Still, we recommend that you check your server logs and block computer(s) that are making this type of requests.

PS: It may not sound like that, but this crash is actually a good thing. It means that request forged to expose some of your server configuration was recognized as such and rejected.
avatar CSBox Pro Sep 1. 2010. 9:30 am
Thanks very much for the information. I will checking into the server logs.
avatar CSBox Pro Oct 26. 2010. 3:04 pm
We have been having additional issues with our server, mysql and the activecollab database. It seems we now have a memory leak (another topic posted here: http://www.activecollab.com/forums/topic/6570/) and it is causing our server to creep to a halt. Could there be some open requests or continual attacks that are contributing to this issue (as seen above)? When in PHPMyAdmin I see several errors and we keep getting notifications from Monit that we have exceeded our Resource limit on our MediaTemple DV server. Would it help to install this: http://www.activecollab.com/forums/topic/5818/1/ ?