I am using Astra theme. I'm facing a wondrous problem. I installed new wordpress 1 or 2 weeks back. So, you can say it's a fresh installation. I am the only user who is managing it. One day i found a plugin named "Presto Player", i thought i might mistakenly installed it. So i deleted it with another plugin "WP forms" (which is usually pre-installed). But 1 day later i realised that both of the deleted plugins were re-installed and activated. I repeated it 2,3 times but from no where they are reappearing in my plugins.
I've no clue the root cause. I've tried different virus/malware scans but it's showing all clean.
My hosting provider A2hosting also said they didn't get any log file of the reinstallation of plugin, and everything else related to the security seems good.
Now, i don't know what should i do to get rid of it. I'll really appreciate if someone can help me :-(
Thanks in advance.
I've tried, deletion of those plugins, security scan checks but unable to spot any issue. I am expecting to get rid of them permanently.
Related
I have set my posts page to both private and draft statuses, but whatever I do I can still access it when not logged in! I have tried all browsers/clearing cache/deactivating all caching plugins etc. I am also just using the standard WordPress query & loop ... Does anyone know why else this might happen?
Update:
Someone helped me to solve this issue. She spotted 2 issues. According to her "The issue was with the mu-plugins installed in the file manager and also the .htaccess"
The .htaccess was renamed as .htaccess_old (I figured out it was created by nitropack plugin). She reset the .htaccess file to its default values but didn't delete the old .htaccess file she just renamed it .htaccess_old. If ever needed in future.
It's a helpful article on how you can reset .htaccess or create a new one.
https://www.inmotionhosting.com/support/edu/wordpress/reset-the-htaccess-file-to-troubleshoot-wordpress-php-errors/
Secondly, she manually deactivated and reactivated the plugins from the Wordpress dashboard. And just after that, everything is working perfectly. (Another plugin she pointed out that was causing the problem in my case was elementor-safe-mode.php)
Please thumbs up, if it helps you :)
I’m using the latest version of Wordpress (4.7.4).
I have something very weird going on in my Dashboard. Not sure when this started.
Can’t say for sure it started with the latest version of Wordpress or not.
My Dashboard became completely useless.
It’s like it’s showing me a flashback of a Dashboard from a few days or hours ago:
Comments I’ve deleted in the Dashboard (hitting “trash”) are suddenly back there, awaiting my moderation.
Plugins I’ve deactivated or even deleted are all back there and according to Dashboard still running (while in my FTP folder they’re certainly gone).
The plugin page cannot be trusted anymore as it shows some plugins are activated that aren’t and vice versa. I have to check on my actual website to confirm which ones are running.
Updates aren’t shown correctly. Once I’ve updated a plugin, a few minutes later it shows me again that there’s a new update.
As you can tell it’s all pretty much the same phenomenon.
It’s as if I’m seeing an older version of my Dashboard.
Not sure what else is broken.
The only other thing I noticed is that even on my actual blog I still see a comment. Blog post says “1 comment”, but the actual comment doesn’t show up.
At first, this all sounds like a “cache problem”.
But I’ve already turned off all caching:
No caching plugin installed
Turned off server caching via htaccess
Disabled leverage browser caching
Emptied my own browser cache
Other things I tested:
Turn off all plugins.
Switch to the standard Wordpress theme “Twenty Twelve”
I tried WP_DEBUG, but nothing related shows up.
I researched the internet, but nobody has described a similar problem, so I suppose this is not a common Wordpress issue.
The issue remains.
Unfortunately I’m not a developer and don’t know too much about the Wordpress codex etc.
But to me it sounds that the mistake is definitely not in the plugin or theme folder.
The problem is that I’ve reached the point where I really cannot turn off plugins via Dashboard properly anymore. It’s so annyoing!
My questions are:
Is it safe to assume that this is related to the Wordpress core
files?
What files exactly are in “charge of” the Dashboard?
Should I just try to re-download the newest Wordpress version and replace a few files (if so which ones)?
Should I do a clean Wordpress re-install or would that be too drastic?
Any other suggestions?
EDIT:
Additionally I tried now:
I manually downloaded the newest version of Wordpress and did just as
described on the Wordpress.org website. I manually replaced wp-admin,
wp-include folders and all root files. The issue remains...
The way my Dashboard is right now, I really can’t use it.
Please advice!
I contacted my host service again.
They just gave me the same line to insert into my .htaccess file and I told them I already tried it and it didn't work.
I then showed them my .htaccess file and they deleted the whole part that concerned their server caching.
Now server caching is completely off and everything works again.
Still not sure why this previously never caused issues.
In the end, it had nothing to do with Wordpress.
I hope this answer will help people who run into similar problems.
I installed a plugin in my dev environment and it worked fine, so I tried it on my production site. I found that a submit button was sending me to our 404 page. I then compared the files in ftp to my local environment and found them to be the same. After that it occurred it may be a database issue.
I then compared the tables and found that the dev environment that works has some entries in the wp-options table, that are missing from the production version. I then deactivated and deleted, then reinstalled it hoping it would add the entries. It did not.
I thought that I would try to remove all entries added from the plugin, then deactivate delete and reinstall, still it did not add anything back. Is there something the plugin could be checking to see if it has been installed before, and therefore is failing to create the entries, I only removed the transients in the wp-option table when I tried to clean it up.
I am at a loss as to what to do to ge the plugin working, and I really believe it all comes down tot he database. Anyone have experience in this?
You could export/import your local database to the production site.
I have a wordpress site which is acting strange lately. It seems like the database is spontaneously rolling back a few hours from time to time. I have noticed it happen at least four times.
When I updated to wordpress 3.5, after a short time, maybe 30-60 minutes I noticed the nag to upgrade was back. I ran the upgrade a second time, even though I was certain that I had already upgraded.
I added a new category and changed a widget on one of my sidebars, only to find that my changes were gone the next day and I had to redo them.
I added a post yesterday, linked to it in various places and then returned several hours later to find the post missing. I rewrote the post from memory and put it back on the site.
This morning when I went to the site, the original post was back and the one that I had recreated from memory was gone. The post's id number was the same as the previous day. I think there was also a draft post that disappeared and reappeared as well.
One last clue which may or may not be related is that when I go to a page on the blog that should generate a 404 message I get a single piece of text which says: "defaced by t3ll0" I noticed this recently, within the last few weeks. I'm not sure how long it has been like that.
I ran Sucuri Scanner, and it found no evidence of malware. Any suggestions of how to troubleshoot this? Could this be a problem with my database rather than wordpress?
UPDATE: It appears that the primary problem I was noticing was because of two versions of the site being up simultaneously. The DNS settings had not been updated to the new site. I'm still investigating if the site was hacked.
You got hacked. "defaced by t3ll0" is the clue. Someone has control of your site and your hosting account.
Work your way through these resources and follow all instructions to completely clean your site or you may be hacked again. See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex.
Change all passwords. Scan your own PC for spyware that may have grabbed your login and password.
http://sitecheck.sucuri.net/ is a good resource, but it scans for malware and not accounts that were hacked and are not being used to distribute malware or have spam links.
Tell your web host you got hacked; and consider changing to a more secure host: Recommended WordPress Web Hosting
You have not applied security may be at number of places.
1. File permissions, folder permissions.
2. Upload folder permissions.
3. Execute permissions.
Now, if you are not a developer how would you check for these vulnerabilities?
I am suggesting you to take a backup of your DB(Export it). Get rid of the existing WP core and reinstall it from fresh.
Delete all plugins and install them all from fresh sources.
If you have used a custom theme then get the backed up version of it and delete the current one as there is a deface to it.
And you can check for a lot of vulnerabilities with plugins like this: http://wordpress.org/extend/plugins/better-wp-security/
Rename your administrator account. Harden your password. Remove write permission from .htaccess and wp-config.php file.
To preface this, all of this functionality was working until a few weeks ago. I have a wordpress site with postname permalinks. Have had this since day 1 and its worked out well until recently.
It's related to portfolios and wordpress (3.4.2).
Suddenly (perhaps after some recent plugin update or change in wind direction:) ) I started getting 404s on all my portfolio 'items'.
Portfolio list (page) works ok. Such as http://www.dasilvamotorsport.com/performance-project-portfolio/
I switched permalinks to default (numeric). And suddenly portfolio items like the below started showing:
http://www.dasilvamotorsport.com/portfolio-item/honda-nsx/
But portfolio category doesn't show:
http://www.dasilvamotorsport.com/performance-project-portfolio/
Switching back to postname as permalink basically reverts back to the original issue that portfolio items don't show up. I had heard that permalinks may need a refresh but this hasn't helped me. I've refreshed a dozen times, restarted the server, checked and double checked .htaccess to no avail.
Again, all of this was working perfectly until a couple of weeks ago so really not sure what happened. Is there something I can debug or try? I've tried WP_DEBUG but for some reason the debug.log file is never created so not sure what's going on there. (Yes, I've tried wp_debug_log parameter also).
No errors relating to this in the apache error log.
Appreciate any help on this.
I have been running this on a ubuntu 11.10 box, with apache2 and varnish cache as a front end. Nothing has changed in terms of infrastructure since day 1 when it worked.
first of all category link you mentioned is not the correct category link, it must be as
http://www.dasilvamotorsport.com/category/performance-project-portfolio/
which is by default.
2nd go to the permalink structure and use the default structure and save them check if is it working correct ?
if yes then again select the %postname% and save,
last you can also try by deactivating all your plugins then check if all the things working fine, after deactivation of plugins then try to reactivate plugins 1 by 1 , so that you can find, if there is any bug in any of the plugins that is making conflict with the permalinks.
thanks.
Have you checked it after deactivation of all your plugins ? if it works then there may be a bug in any of the plugins.
then reactivate them 1 by 1, so that you can find the exact faulty plugin,
thanks,