Opened 2 years ago

Closed 2 years ago

#12067 closed Bug/Something is broken (fixed)

Site down

Reported by: https://id.mayfirst.org/southernvision Owned by:
Priority: High Component: Tech
Keywords: Cc:
Sensitive: no

Description

I just moved a site to mayfirst hosting. It worked for a few days but it now down. URL is ncignite.org (ncignite.mayfirst.org)

Change History (3)

comment:1 Changed 2 years ago by https://id.mayfirst.org/jamie

The site should be working now. I fixed a problem that may have been caused by a compromise.

I noticed the following in your error log:

[Tue Aug 30 10:38:39.233298 2016] [proxy_fcgi:error] [pid 2864:tid 140163069982464] [client 216.244.66.243:45282] AH01071: Got error 'PHP message: PHP Warning:  require(/home/members/southernvision/sites/ncignite.org/web/wp-includes/class-wp.php): failed to open stream: No such file or directory in /home/members/southernvision/sites/ncignite.org/web/wp-settings.php on line 95\nPHP message: PHP Fatal error:  require(): Failed opening required '/home/members/southernvision/sites/ncignite.org/web/wp-includes/class-wp.php' (include_path='.:/usr/share/php:/usr/share/pear') in /home/members/southernvision/sites/ncignite.org/web/wp-settings.php on line 95\n'

The error says that the file wp-includes/class-wp.php was missing from your installation. And, sure enough, it was not there.

I downloaded a fresh copy of WordPress and copied the missing file over and now it is working.

In the process I also noticed that you had a file wp-includes/file.php that does not belong there and this file looks like a back door, so I removed it. It's modification time was "August 27, 11:15".

I didn't see anything in your web log to indicate a hack at that time, so I'm still not clear on how that file got there and whether the vulnerability still exists.

comment:2 Changed 2 years ago by https://id.mayfirst.org/jaimev

  • Resolution set to fixed
  • Status changed from new to feedback

Can you verify the site is working now?

comment:3 Changed 2 years ago by automatic

  • Status changed from feedback to closed

No news is good news (we hope)! Given the lack of feedback, we think this ticket can be closed.

Please login to add comments to this ticket.

Note: See TracTickets for help on using tickets.