logo
Welcome to our new AbleCommerce forums. As a guest, you may view the information here. To post to this forum, you must have a registered account with us, either as a new user evaluating AbleCommerce or an existing user of the application. For all questions related to the older version of Gold and earlier, please go to AbleCommerce Gold forum. Please use your AbleCommerce username and password to Login. New Registrations are disabled.

Notification

Icon
Error

Options
Go to last post Go to first unread
david9688526  
#1 Posted : Friday, June 27, 2025 10:15:44 AM(UTC)
david9688526

Rank: Newbie

Groups: Developers
Joined: 4/17/2020(UTC)
Posts: 2

Thanks: 1 times
I'm currently getting hundreds of these per second and it keeps bringing down my site.
My best guess is there's a bot putting weird chars in the Search box and AbleCommerce isn't handling the weird characters appropriately.
Any suggestions?

2025-06-27 10:08:55,842 ERROR ADOExceptionReporter Unable to translate Unicode character \uD83D at index 81 to specified code page.
2025-06-27 10:08:55,842 WARN ADOExceptionReporter System.Text.EncoderFallbackException: Unable to translate Unicode character \uD83D at index 81 to specified code page.
at System.Text.EncoderExceptionFallbackBuffer.Fallback(Char charUnknown, Int32 index)
at System.Text.EncoderFallbackBuffer.InternalFallback(Char ch, Char*& chars)
at System.Text.UTF8Encoding.GetBytes(Char* chars, Int32 charCount, Byte* bytes, Int32 byteCount, EncoderNLS baseEncoder)
at System.Text.EncoderNLS.GetBytes(Char[] chars, Int32 charIndex, Int32 charCount, Byte[] bytes, Int32 byteIndex, Boolean flush)
at System.IO.StreamWriter.Flush(Boolean flushStream, Boolean flushEncoder)
at System.IO.StreamWriter.Write(Char[] buffer, Int32 index, Int32 count)
at System.IO.TextWriter.SyncTextWriter.WriteLine(String value)
at NHibernate.AdoNet.Util.SqlStatementLogger.LogCommand(String message, DbCommand command, FormatStyle style)
at NHibernate.AdoNet.AbstractBatcher.ExecuteReader(DbCommand cmd)
at NHibernate.Loader.Loader.GetResultSet(DbCommand st, Boolean autoDiscoverTypes, Boolean callable, RowSelection selection, ISessionImplementor session)
at NHibernate.Loader.Loader.DoQuery(ISessionImplementor session, QueryParameters queryParameters, Boolean returnProxies, IResultTransformer forcedResultTransformer)
at NHibernate.Loader.Loader.DoQueryAndInitializeNonLazyCollections(ISessionImplementor session, QueryParameters queryParameters, Boolean returnProxies, IResultTransformer forcedResultTransformer)
at NHibernate.Loader.Loader.LoadEntity(ISessionImplementor session, Object id, IType identifierType, Object optionalObject, String optionalEntityName, Object optionalIdentifier, IEntityPersister persister)

Wanna join the discussion?! Login to your AbleCommerce Forums forum account. New Registrations are disabled.

Katie S  
#2 Posted : Monday, June 30, 2025 10:44:34 AM(UTC)
Katie S

Rank: Advanced Member

Groups: System, Administrators, Developers, Registered, HelpDesk
Joined: 10/29/2018(UTC)
Posts: 487

Thanks: 4 times
Was thanked: 34 time(s) in 33 post(s)
Hello,

Every form field has SQL injection prevention added. This won't prevent errors from being logged though.

With hundreds per second, that would likely be an SQL injection attack which is something Ablecommerce can't prevent. The only way to stop that is by identifying the IP and blocking at the firewall. Also, Cloudflare (or similar servcies), when setup properly, should also be able to prevent Denial of Service and similar kinds of attacks.
Thanks for your support!

Katie
Secure eCommerce Software and Hosting
judy e  
#3 Posted : Tuesday, July 1, 2025 8:10:04 AM(UTC)
judy e

Rank: Advanced Member

Groups: Developers
Joined: 11/7/2018(UTC)
Posts: 309

Thanks: 21 times
Was thanked: 5 time(s) in 5 post(s)
Does the AC error log show that the error is on the search page? Do IIS logs show posts are coming from one ip or a variety of ip addresses?
You can prevent some errors from being logged by adding code to the global.asax.cs file, like AC does here:
if (((HttpException)exception).Message.StartsWith("A potentially dangerous"))
return;

Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.