Opened 3 years ago

Closed 3 years ago

#12067 closed Bug/Something is broken (fixed)

Site down

Reported by: Jillian Johnson Owned by:
Priority: High Component: Tech
Keywords: Cc:
Sensitive: no

Description

I just moved a site to mayfirst hosting. It worked for a few days but it now down. URL is ncignite.org (ncignite.mayfirst.org)

Change History (3)

comment:1 Changed 3 years ago by Jamie McClelland

The site should be working now. I fixed a problem that may have been caused by a compromise.

I noticed the following in your error log:

[Tue Aug 30 10:38:39.233298 2016] [proxy_fcgi:error] [pid 2864:tid 140163069982464] [client 216.244.66.243:45282] AH01071: Got error 'PHP message: PHP Warning:  require(/home/members/southernvision/sites/ncignite.org/web/wp-includes/class-wp.php): failed to open stream: No such file or directory in /home/members/southernvision/sites/ncignite.org/web/wp-settings.php on line 95\nPHP message: PHP Fatal error:  require(): Failed opening required '/home/members/southernvision/sites/ncignite.org/web/wp-includes/class-wp.php' (include_path='.:/usr/share/php:/usr/share/pear') in /home/members/southernvision/sites/ncignite.org/web/wp-settings.php on line 95\n'

The error says that the file wp-includes/class-wp.php was missing from your installation. And, sure enough, it was not there.

I downloaded a fresh copy of WordPress and copied the missing file over and now it is working.

In the process I also noticed that you had a file wp-includes/file.php that does not belong there and this file looks like a back door, so I removed it. It's modification time was "August 27, 11:15".

I didn't see anything in your web log to indicate a hack at that time, so I'm still not clear on how that file got there and whether the vulnerability still exists.

comment:2 Changed 3 years ago by JaimeV

Resolution: fixed
Status: newfeedback

Can you verify the site is working now?

comment:3 Changed 3 years ago by automatic

Status: feedbackclosed

No news is good news (we hope)! Given the lack of feedback, we think this ticket can be closed.

Please login to add comments to this ticket.

Note: See TracTickets for help on using tickets.