phpBB • Free and Open Source Forum Software

The SID will appear in links on first page load after the session has expired. I'm assuming the findtime directive is to only scan entries over the last 60 minutes, make sure your session length is at least 3600 seconds. Additionally If any of your users are blocking cookies the SID is always going...

Thanks for those links. I was looking for confirmation of some type of attack. I certainly don't want to block any legitimate requests. I've already found a solution that seems to be working - using fail2ban to automatically block IPs. It's been in use less than 24 hours but it seems to be working v...

Oh sorry.. it's late here :lol: It could be a "bad bot", do you see those IP's in viewonline.php ? If it's a bot, you can block it via htaccess No problem. I should have checked viewonline.php that but it didn't occur to me since I never use that feature. If it's a bot, then shouldn't it say so in ...

Do you have some kind of "htmlvalidator" that auto checked your files? Seems to come from htmlvalidator.com My website is htmlvalidator.com but I am not running any site checker that is causing those requests.... and if it was some type of site checker, why are the requests from so many different I...

I've been getting many requests on phpBB from various IP addresses that have spiked my CPU and made my entire website slow to respond. The requests seem to all have an "sid" in them (and the same "sid" even though they are from various IPs)... and many of them they claim they are from an old version...

As of phpBB 3.2.4-RC1 the username is not required any more. https://tracker.phpbb.com/browse/PHPBB3-10432 https://github.com/phpbb/phpbb/pull/4223 Awesome! And it only took a little more than 7 years since I started this topic! :D But seriously... I'm happy to see this change made. A special thank...

Also, try enabling mbstring on your server. I asked my buddy to go ahead and enable that and HOLY CRAP!! That must have been it because searches are VERY FAST now. There should be a warning about this somewhere in the phpBB Administration Control Panel if mbstring is not enabled! Now I can turn bac...

Find this line (line 669 in 3.2.2) $hilit = str_replace(' ', '|', $hilit); replace it with $hilit = false; Not truly tested but I am sure there will be no more highlights visible. edit: tested after I did recreate the index, it doesn't show the results in other pages. Thanks. Too bad it also doesn'...

Interesting. It's impossible to know for sure what's making it slow on your installation without profiling it. If it's not the regexp used in preg_replace() then the second likeliest culprit would be the algorithm in get_context() , although I can't reproduce it locally. You can test this hypothesi...

Alternatively, you can comment the 3 individual lines that contain the <span class="posthilit"> part. That's lines 1089, 1172 and 1173 on my local copy. That got rid of the highlights but it didn't fix the search time problem... so you get the bad stuff but not the good stuff. Maybe the problem is ...

JoshyPHP wrote: ↑

Thu Mar 29, 2018 11:05 pm

Based on a cursory examination of the file, I don't believe there are any side-effects to disabling highlighting apart from the obvious.

Unfortunately I think I found one... I updated my previous post with it.

JoshyPHP, Again, thank you so much for helping me find this issue. It was really irritating me! But what do I do here? I really like the search highlights but the search time is a huge problem and is unacceptable. If the only practical solution to fixing search times is to disable highlighting by ma...

You may also try to edit search.php and replace $hilit = str_replace(' ', '|', $hilit); with $hilit = ''; to see if disabling this feature makes any difference with the slow search terms. That made a HUGE difference and must be it! But what does this mean exactly and how do I bring this feature bac...

You'd need to profile the script to see where most of the time is spent. That's something that's easier to do on a development server rather than live. Thanks. I have never profiled a PHP script before so I'd have to figure this out. If you post a copy of your phpinfo() it may reveal some important...

It's Linode virtual server but my buddy who manages it for me replicated the system on a dedicated machine and it still had the same problem. We've checked the databases for errors and they came back "OK". So we are (still) stumped too and have just been living with it for almost a year now because ...