phpmyadmin/website

Broken links

Opened this issue · 13 comments

williamdes commented

@ibennetch could you fix the links on CVEs?

I can not run the tool today but will do it soon to post a complete list here

ibennetch commented

The Weblate report is quite interesting because we're generating a link to, ch_TW and ch_CN for instance, don't immediately seem to exist on Weblate. I'll have to research this further.

The -36 PMASA commits have been fixed ✅, for some reason GitHub wasn't liking the short form.

The -30 ones are the short hash but seem to be working correctly as links for me. I can keep this opened to eventually change them to the long hashes, but nothing seems broken to me.

  • 👍1
williamdes commented

Thank you!
I think there is more CVE links with small hashes and as time passes chances of conflicts get bigger
I will make a list to update

williamdes commented

On https://www.phpmyadmin.net/security/PMASA-2016-30/

https://github.com/phpmyadmin/phpmyadmin/commit/fd8cdd79333e5ab47d395f5f5178faaaf795d39e is the long format for https://github.com/phpmyadmin/phpmyadmin/commit/fd8cdd7

williamdes commented

report_links.txt

This is a full recursive report

Finished! 102702 links found. 94646 excluded. 139 broken.
Elapsed time: 43 minutes, 17 seconds
williamdes commented 
cat ~/report_links.txt | grep -F "BROKEN" | sort | uniq -u
├─BROKEN─ http://ceukelai.re/ (HTTP_403)
├─BROKEN─ http://code.gosu.pl/pma_bug.html (ERRNO_ENOTFOUND)
├─BROKEN─ http://hosted.weblate.org/projects/phpmyadmin/master/nb/ (HTTP_404)
├─BROKEN─ https://archiv.linuxsoft.cz/article_list.php?id_kategory=215 (ERRNO_EPROTO)
├─BROKEN─ https://demo.phpmyadmin.net/master-config/changelog.php (HTTP_404)
├─BROKEN─ https://demo.phpmyadmin.net/master-http/ (HTTP_401)
├─BROKEN─ http://securitynews.ir/advisories/phpmyadmin281.txt (HTTP_404)
├─BROKEN─ https://files.phpmyadmin.net/phpMyAdmin/4.0.5/phpMyAdmin-4.0.5-all-languages.zip (BLC_UNKNOWN)
├─BROKEN─ https://files.phpmyadmin.net/phpMyAdmin/4.0.5/phpMyAdmin-4.0.5-all-languages.zip (HTTP_undefined)
├─BROKEN─ https://files.phpmyadmin.net/phpMyAdmin/4.2.9/phpMyAdmin-4.2.9-all-languages.tar.bz2.sha256 (BLC_UNKNOWN)
├─BROKEN─ https://files.phpmyadmin.net/phpMyAdmin/4.5.3/phpMyAdmin-4.5.3-all-languages.7z.asc (BLC_UNKNOWN)
├─BROKEN─ https://files.phpmyadmin.net/phpMyAdmin/4.5.3/phpMyAdmin-4.5.3-all-languages.7z (BLC_UNKNOWN)
├─BROKEN─ https://github.com/phpmyadmin/phpmyadmin/commit/5633b1d (HTTP_404)
├─BROKEN─ https://github.com/phpmyadmin/phpmyadmin/commit/fd8cdd7 (HTTP_404)
├─BROKEN─ https://github.com/phpmyadmin/themes/pulls (BLC_UNKNOWN)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/be%40latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/be@latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/en_US@rude/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/nb/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/sr%40latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/sr@latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/uz%40latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/uz@latin/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/zh_CN/ (HTTP_404)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/zh_TW/ (HTTP_404)
├─BROKEN─ https://linuxtag.org/2014/en (BLC_UNKNOWN)
├─BROKEN─ https://progit.org/ (BLC_UNKNOWN)
├─BROKEN─ http://survey.phpmyadmin.net/index.php?sid=72977 (ERRNO_ENOTFOUND)
├─BROKEN─ http://survey.phpmyadmin.net/index.php?sid=72977 (HTTP_undefined)
├─BROKEN─ https://www.clfip.com/ (HTTP_403)
├─BROKEN─ https://www.fransallen.com/ (ERRNO_EPROTO)
├─BROKEN─ https://www.fransallen.com/ (HTTP_undefined)
├─BROKEN─ https://www.handandwristinstitute.com/ (HTTP_403)
├─BROKEN─ https://www.irill.org/videos/debconf13/phpMyAdmin_tutorial.html (ERRNO_EPROTO)
├─BROKEN─ https://www.linkedin.com/in/ashutoshbarot/ (HTTP_999)
├─BROKEN─ https://www.linkedin.com/in/lalithr95 (HTTP_999)
├─BROKEN─ https://www.linkedin.com/pub/jian-jiang/3a/660/775 (HTTP_999)
├─BROKEN─ https://www.linuxtag.org/2005 (BLC_UNKNOWN)
├─BROKEN─ https://www.phpmyadmin.net/files/4.0.10/ (BLC_UNKNOWN)
├─BROKEN─ https://www.phpmyadmin.net/static/images/themes/arctic_ocean.png (BLC_UNKNOWN)
├─BROKEN─ https://www.phpmyadmin.net/translate/ (BLC_UNKNOWN)
├─BROKEN─ http://www.defcontn.com/ (BLC_UNKNOWN)
├─BROKEN─ http://www.exaprobe.com/labs/advisories/esa-2004-1213.html (HTTP_404)
├─BROKEN─ http://www.lamparea.org/ (BLC_UNKNOWN)
├─BROKEN─ http://www.lamparea.org/ (HTTP_undefined)
├─BROKEN─ http://www.mohankhadka.com.np/ (BLC_UNKNOWN)
├─BROKEN─ http://www.mohankhadka.com.np/ (HTTP_undefined)
├─BROKEN─ http://www.netvigilance.com/html/advisory0005.htm (HTTP_404)
├─BROKEN─ http://www.olivierbeg.nl/ (HTTP_403)
├─BROKEN─ http://www.php-security.org/MOPB/MOPB-02-2007.html (BLC_UNKNOWN)
├─BROKEN─ http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt (ERRNO_ENOTFOUND)
├─BROKEN─ http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt (ERRNO_ENOTFOUND)
├─BROKEN─ http://www.xxor.se/ (ERRNO_ENOTFOUND)
williamdes commented

@ibennetch some links are for versions of phpmyadmin and others are very old broken links
Can you fix them or do you want help ?
I do not have access to edit the website.

ibennetch commented

I've fixed a few of these. A lot of them seem like false positives.

LinkedIn seems to return the HTTP 999 for some reason but the links are valid.

There's something odd going on with some of the Weblate links that I'm still not sure about.

Some of the old links, such as the fransallen theme link, would require re-releasing an old theme and I'm not sure that's worthwhile.

Several of the rest are security firms or personal websites of people who reported security issues and I can keep going through the PMASA advisories and removing those broken links.

This isn't done yet — just improved.

  • 👍1
AdrianoCahete commented

LinkedIn seems to return the HTTP 999 for some reason but the links are valid.

LinkedIn returns 999 when the machine who are trying to get the link make more than 5 (IIRC) connections in a small time window,

  • 👍1
  • 👀1
williamdes commented

Here is an update, removed linkedin and github rate limit errors

root@1ce9c1fa13af:/# cat check-links.txt | grep -F "BROKEN" | sort | uniq -u
└─BROKEN─ http://forge.mysql.com/wiki/FOSDEM (HTTP_404)
└─BROKEN─ http://forge.mysql.com/wiki/SummerOfCode2009Ideas. (HTTP_404)
└─BROKEN─ http://securitynews.ir/advisories/phpmyadmin281.txt (ERRNO_ENOTFOUND)
└─BROKEN─ http://sourceforge.net/awards/cca/ (HTTP_404)
└─BROKEN─ http://sourceforge.net/awards/cca/nomination.php?group (HTTP_404)
└─BROKEN─ http://sourceforge.net/awards/cca/vote.php (HTTP_404)
└─BROKEN─ http://sourceforge.net/community/cca08-vote?group (HTTP_404)
└─BROKEN─ http://sourceforge.net/tracker/index.php?func=detail (HTTP_404)
└─BROKEN─ http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html (HTTP_404)
└─BROKEN─ http://www.lamparea.org/ (ERRNO_ENOTFOUND)
└─BROKEN─ http://www.packtpub.com/article/packt-announces-author-of-the-year-award (BLC_UNKNOWN)
└─BROKEN─ http://www.packtpub.com/article/win (HTTP_404)
└─BROKEN─ http://www.packtpub.com/phpmyadmin-3rd-edition/book (HTTP_404)
└─BROKEN─ https://sourceforge.net/mailarchive/message.php?msg (HTTP_404)
├─BROKEN─ http://ceukelai.re/ (HTTP_403)
├─BROKEN─ http://code.gosu.pl/pma_bug.html (ERRNO_ENOTFOUND)
├─BROKEN─ http://forge.mysql.com/wiki/FOSDEM (HTTP_404)
├─BROKEN─ http://forge.mysql.com/wiki/SummerOfCode2009Ideas. (HTTP_404)
├─BROKEN─ http://sourceforge.net/awards/cca/nomination.php?group (HTTP_404)
├─BROKEN─ http://sourceforge.net/awards/cca/vote.php (HTTP_404)
├─BROKEN─ http://sourceforge.net/community/cca08-vote?group (HTTP_404)
├─BROKEN─ http://sourceforge.net/tracker/index.php?func=detail (HTTP_404)
├─BROKEN─ http://survey.phpmyadmin.net/index.php?sid=72977 (ERRNO_ENOTFOUND)
├─BROKEN─ http://survey.phpmyadmin.net/index.php?sid=72977 (HTTP_undefined)
├─BROKEN─ http://www.arrelnet.com/advisories/adv20050403.html (HTTP_403)
├─BROKEN─ http://www.devconsole.info/ (ERRNO_EHOSTUNREACH)
├─BROKEN─ http://www.digitrustgroup.com/advisories/TDG-advisory071015a.html (HTTP_404)
├─BROKEN─ http://www.exaprobe.com/labs/advisories/esa-2004-1213.html (HTTP_404)
├─BROKEN─ http://www.lamparea.org/ (HTTP_undefined)
├─BROKEN─ http://www.netvigilance.com/html/advisory0005.htm (HTTP_404)
├─BROKEN─ http://www.olivierbeg.nl/ (ERRNO_ENOTFOUND)
├─BROKEN─ http://www.packtpub.com/article/packt-announces-author-of-the-year-award (HTTP_undefined)
├─BROKEN─ http://www.packtpub.com/article/win (HTTP_404)
├─BROKEN─ http://www.packtpub.com/phpmyadmin-3rd-edition/book (HTTP_404)
├─BROKEN─ http://www.php-security.org/MOPB/MOPB-02-2007.html (HTTP_404)
├─BROKEN─ http://www.trialpro.com/ (ERRNO_EPROTO)
├─BROKEN─ http://www.trialpro.com/ (HTTP_undefined)
├─BROKEN─ http://www.xxor.se/ (ERRNO_ENOTFOUND)
├─BROKEN─ http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt (ERRNO_ENOTFOUND)
├─BROKEN─ http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt (ERRNO_ENOTFOUND)
├─BROKEN─ https://archiv.linuxsoft.cz/article_list.php?id_kategory=215 (ERRNO_EPROTO)
├─BROKEN─ https://blog.apkmonk.com/how-to-install-phpmyadmin-on-aws/ (HTTP_403)
├─BROKEN─ https://debconf13.debconf.org/ (ERRNO_EPROTO)
├─BROKEN─ https://hosted.weblate.org/projects/phpmyadmin/master/en_US@rude/ (HTTP_404)
├─BROKEN─ https://linuxtag.org/2014/en (BLC_UNKNOWN)
├─BROKEN─ https://mypromocode.com/ (ERRNO_ENOTFOUND)
├─BROKEN─ https://progit.org/ (BLC_UNKNOWN)
├─BROKEN─ https://sourceforge.net/mailarchive/message.php?msg (HTTP_404)
├─BROKEN─ https://www.banksecrets.eu/ (BLC_UNKNOWN)
├─BROKEN─ https://www.clfip.com/ (HTTP_403)
├─BROKEN─ https://www.handandwristinstitute.com/ (HTTP_403)
├─BROKEN─ https://www.irill.org/videos/debconf13/phpMyAdmin_tutorial.html (ERRNO_EPROTO)
├─BROKEN─ https://www.linuxtag.org/2005 (BLC_UNKNOWN)
├─BROKEN─ https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet (HTTP_404)
williamdes commented

New update

cat check-links.txt | grep -F "BROKEN" | grep -v -F "twitter.com" | grep -v -F "linkedin.com" | grep -v -F "trialpro.com" | sort | uniq -u