Why is the www version of website not working properly? - wordpress

I'm facing a problem with the following website: https://www.rhythmandstrums.ie/
When I open the "www" version of it: https://www.rhythmandstrums.ie/ I get a bugged website, failing to open stylesheets and possibly other file sources, whereas if I open the website without the "www", everything works as expected: https://rhythmandstrums.ie/
Some considerations:
This website is hosted in a Wordpress Multisite, so it shares the same configuration files as other websites, none of the other websites have this issue. So I was wondering if this could be a problem with redirection, although, again, none of the other websites have this problem and they share the same config files (including server block settings and such, it is in nginx).
I have checked the DNS values and nameservers and everything looks fine (I took base from all the other websites that were set up in the same way, I can post a screenshot if it might be of help).
This error also seems to happen in the Wordpress backend, with the admin dashboard not being able to load parts of plugins, it seems like it is looking where it doesn't exist.
I have replaced instances of the www version of the url in the database, as I do with other websites as well, but that didn't seem to fix the issue.
I have cleared cache a few times (both in the cache plugin and manually in the nginx server - manually deleting the contents of the cache folder), and since this has been going for a long time, I don't know if this is cache related, but any suggestion is highly appreciated. Again, all the configs, included the cache plugin settings are the same for all the other websites in the network, which none are having this issue.
If I inspect the console when I'm accessing both versions of the website, www and non-www it seems like it's trying to pull information from different locations, but I can't figure out why it's doing that.
Guys, I hope this was not confusing, but let me know if you you would like to see screenshots or other info that might be relevant. Thanks so much in advance, I really appreciate it.

Related

WordPress site impacted with redirect injection

I have a website that is running on an AWS server using the Bitnami Nginx and WordPress image.
https://www.athleticclubhk.com/
Recently it got all our ads on Google stopped due to malicious content. Oddly this time, its trickier then your standard malware of infected files. When visiting the site incognito, the first and only the first link click gets redirected using the following code:
window.location.replace("https://cartoonmines.com/scount");window.location.href = "https://cartoonmines.com/scount";
This is being injected on any link, however, upon investigating the loaded code on inspect its not injecting it into the page.
I've tried to hunt down the theme, plugins, core files and found nothing!
I replaced and reinstalled WordPress core files, deactivated all plugins and even swapped the theme - the problem is still there. I can't find any hidden .htaccess file in the entire root directory.
I even used GREP to try to look for anything fishy (any clues here that someone can help with?) nothing so far.
The site is still impacted with this so you can easily load the link ~ i do use malwarebytes to keep myself protected, incase you are opening this directly.
Can anyone help?
The redirection code is implanted to /wp-includes/js/wp-emoji-release.min.js.
How to confirm:
watch the cookies when clicking internal page, a new cookie is being set for tracking first clicks, named ht_rr
save complete webpage locally and try to load it, and check in Chrome dev tools, you'll see that in Console tab it complains about this Javascript file attempting to set the aforementioned cookie
While a temporary resolution of deleting the file will fix things for some time...
There's no excuse for not setting up a proper server stack. Bitnami or other "great stacks" won't cut it security-wise. They exist for "fast", but no "quality" setup, and of course, it's never going to be secure.
The file got created somehow / had write privileges. This indicates a problem with the setup most of the time. Unless you're using some nulled plugins or plugins from bad sources.
Once again, since the website was essentially "pwned", deleting the Javascript file does not mean complete disinfection. To preserve things in a secure state, I would recommend setting things on a clean server environment with strict PHP-FPM permissions aka "lockdown" chmod, and look for write errors to look for infected PHP files.
Check out some guides on the matter of secure NGINX/PHP-FPM setup:
NGINX and PHP-FPM. What my permissions should be?
Best practice secure NGINX configuration for WordPress
NGINX Security Headers, the right way
Just had the same problem and it was Zend Font Plugin, the same that some people mentioned before.
Installed Wordfence and this came out. Deleted the plugin and now the site is working perfectly.
Disable plugins and check again.
Change the database username and password.
Ask the hosting manager to check the host.

WordPress Images not loading after migration

I'm facing a problem the last couple of days and I can't figure it out. We changed the hosting company and move our website (same domain name) to another hosting provider. After migration, images not loading, and I can see them broken in WordPress's Media Library.
I tried to change the permissions in the upload folder but that didn't worked. SSL is also working as expected. I disabled all the plugins and even changed the theme, but the problem still persists. I re-uploaded all the backup files again to make sure that I wasn't missing something, but the problem haven't been solved.
I also have the support team from the hosting provider that works on the website, but there's been 2 days now and they can't find a way to solve the issue.
In the browser's Search Console I do see the following errors: https://ibb.co/y0KCmHY
I've also checked the DNS settings in CloudFlare to make sure that I have setup everything correctly.
Any help will be much appreciated!
I am no wordpress expert but I think I would first check whether image files in your backup files are not damaged/corrupted.
I would check both your backup files and image files in your new hosting server
(download image files from your new hosting server via FTP)
Sorry I couldn't help you much except where to look at first which you might already know.
From the image that you've provided, what I can tell the status is 404 like you know which means your image is not found. Something wrong with all your image URL. You need to make sure the URL is correct for each image you have.

Wordpress Dashboard broken, displays “flashbacks” of comments/plugins/updates

I’m using the latest version of Wordpress (4.7.4).
I have something very weird going on in my Dashboard. Not sure when this started.
Can’t say for sure it started with the latest version of Wordpress or not.
My Dashboard became completely useless.
It’s like it’s showing me a flashback of a Dashboard from a few days or hours ago:
Comments I’ve deleted in the Dashboard (hitting “trash”) are suddenly back there, awaiting my moderation.
Plugins I’ve deactivated or even deleted are all back there and according to Dashboard still running (while in my FTP folder they’re certainly gone).
The plugin page cannot be trusted anymore as it shows some plugins are activated that aren’t and vice versa. I have to check on my actual website to confirm which ones are running.
Updates aren’t shown correctly. Once I’ve updated a plugin, a few minutes later it shows me again that there’s a new update.
As you can tell it’s all pretty much the same phenomenon.
It’s as if I’m seeing an older version of my Dashboard.
Not sure what else is broken.
The only other thing I noticed is that even on my actual blog I still see a comment. Blog post says “1 comment”, but the actual comment doesn’t show up.
At first, this all sounds like a “cache problem”.
But I’ve already turned off all caching:
No caching plugin installed
Turned off server caching via htaccess
Disabled leverage browser caching
Emptied my own browser cache
Other things I tested:
Turn off all plugins.
Switch to the standard Wordpress theme “Twenty Twelve”
I tried WP_DEBUG, but nothing related shows up.
I researched the internet, but nobody has described a similar problem, so I suppose this is not a common Wordpress issue.
The issue remains.
Unfortunately I’m not a developer and don’t know too much about the Wordpress codex etc.
But to me it sounds that the mistake is definitely not in the plugin or theme folder.
The problem is that I’ve reached the point where I really cannot turn off plugins via Dashboard properly anymore. It’s so annyoing!
My questions are:
Is it safe to assume that this is related to the Wordpress core
files?
What files exactly are in “charge of” the Dashboard?
Should I just try to re-download the newest Wordpress version and replace a few files (if so which ones)?
Should I do a clean Wordpress re-install or would that be too drastic?
Any other suggestions?
EDIT:
Additionally I tried now:
I manually downloaded the newest version of Wordpress and did just as
described on the Wordpress.org website. I manually replaced wp-admin,
wp-include folders and all root files. The issue remains...
The way my Dashboard is right now, I really can’t use it.
Please advice!
I contacted my host service again.
They just gave me the same line to insert into my .htaccess file and I told them I already tried it and it didn't work.
I then showed them my .htaccess file and they deleted the whole part that concerned their server caching.
Now server caching is completely off and everything works again.
Still not sure why this previously never caused issues.
In the end, it had nothing to do with Wordpress.
I hope this answer will help people who run into similar problems.

Wordpress edit post/page screen is messed up

I've transferred my wordpress website from a shared hosting to a linux VPS.
Everything is working fine instead of one thing. I'm getting realy weird pages for editing posts/pages.
I'm not sure how to name it and can't find anything on google about it, so I hope someone here can send me in the right direction.
Screenshot
At a quick glance, looks like a browser caching issue. Try the following:
Clear browser cache/cookies etc. and restart the browser/PC
Check with a different browser
Depending on how you migrated (transferred) the site, it is possible that all files did not get transferred fully and/or the database did not get imported fully. If 1. and 2. above fail, delete everything from the VPS and try again.
I'm sure when you check the network tab or console in inspect element on chrome, you will receive a lot of 404 errors because it is not able to load the required files for some reason.
What you can try is to add define('CONCATENATE_SCRIPTS', false) into your wp-config.php file. What this does is load all the javascript files individually, instead of one concatenated file.
Question: Are you using the same domain on your VPS? Or are you accessing the site on your VPS through a different domain? If so, you might want to update your database to correspond with the domain you're testing with now. Because this can cause strange behavior as well.

Trying To Access A Wordpress Site Over The Internet

I have a wordpress site on the Ubuntu computer that I am using as a webserver. I have the wordpress system installed in /var/www/html. I have created pages which display nicely from any computer, tablet or handheld within my lan environment.
I am going crazy trying to access my website from the internet. Can anybody please help?
I have a noip address and a BTHub which allows me to set up dynamic dns to inform my noip account automatically when the ip changes and this works fine.
I have set up port forwarding for http and https to the computer hosting my wordpress site
I have tried assigning DMZ to my wordpress hosting computer
I have made sure I own the wordpress folders and files within them
my LAMP installed without a hitch and over the LAN access is no problem with one exception - I can only use the default permalinks or wordpress can not find my pages - no idea why? I had to cut wordpress into var/www/html as it initially went into www and could not be found
I have spent DAYS with this! It is a part of a bigger project where I want to run some projects across the internet. I dispair that if I cant get a simple wordpress site to work that my projects are doomed! lol.
When I try to access my site from another location across the internet, I get the first page, but without the media picture that should be on it. When I try to change pages I get the not found message. I also get the initial page without a style sheet in some instances. I have no clue about how to fix this. I took up Linux about three months ago, having been a windows and OSx man for years. I am in love, but have a steep learning curve!
It looks like a location issue or a WAN address issue or something I cant figure out!
I would appreciate any help that anyone out there can give me.
Eric
Thank you for your feedback. I have just this moment sorted it out. I read up the permalinks wiki thoroughly and I found out how to change the URLs from within the wp- files in the theme I was using. After a few refreshes it now works. I will post up a how-to for any others who may be experiencing the same frustration.

Resources