WordPress.org

Ready to get started?Download WordPress

Forums

"WordPress deleted ..." but user does not exist? (23 posts)

  1. foxt
    Member
    Posted 2 years ago #

    I have a new site that recently went live. In the activity log, I am noticing actions by user="WordPress" that show that user deleting posts. When I try to review that user, I get "Invalid user ID". The user is not listed in the database for this install. I am new to WP, and have no idea where to look next: What the heck is going on?

  2. esmi
    Forum Moderator
    Posted 2 years ago #

    In the activity log

    What "activity log"?

  3. foxt
    Member
    Posted 2 years ago #

    Sorry, "Activity Monitor" on the dashboard.

  4. Pioneer Valley Web Design
    Member
    Posted 2 years ago #

    It may be that someone/thing has gained server level impersonation of your WordPress hosting account - check if site is hacked at Securi.

  5. esmi
    Forum Moderator
    Posted 2 years ago #

    What "Activity Monitor"? There's no such functionality in WordPress core.

  6. chasj
    Member
    Posted 2 years ago #

    Could you describe what Activity Log you are referring to?

  7. foxt
    Member
    Posted 2 years ago #

    Ok, it appears that someone has installed the "ThreeWP Activity Monitor" plugin, and that's where the Activity Monitor is coming from. I can deactivate/delete it. Is there some better way (i.e. core function) that will let me monitor activity?

  8. chasj
    Member
    Posted 2 years ago #

    Other than installing third-party plugins I don't think there is any Core activity monitor, with the exception of the Dashboard "Right Now" panel.

  9. esmi
    Forum Moderator
    Posted 2 years ago #

    And I'd guess that the plugin is picking up activity on the server and that it is WordPress itself that you are seeing as a "user".

  10. Pioneer Valley Web Design
    Member
    Posted 2 years ago #

    Sounds like a plugin that should be yanked to me.

  11. foxt
    Member
    Posted 2 years ago #

    Ok, I yanked it. Thanks for such a fast set of responses from everyone!

    Now, any pointers as to how I can learn more about why WordPress itself would be deleting my posts? I have so much to learn ...

  12. esmi
    Forum Moderator
    Posted 2 years ago #

    Are you actually missing any posts? Have you limited the number of post revisions that are being stored in your database?

  13. Pioneer Valley Web Design
    Member
    Posted 2 years ago #

    A site link would help - did you scan at Securi?

  14. foxt
    Member
    Posted 2 years ago #

    I have not yet limited the number of revisions (at least not that I know of - I did not add the code that would do that to the config file yet). The site is at http://www.woodstockdayschool.org And Sucuri says the site is clean.

  15. esmi
    Forum Moderator
    Posted 2 years ago #

    Are you actually missing any posts?

  16. foxt
    Member
    Posted 2 years ago #

    Yes, the posts that are listed as "WordPress deleted ..." are missing.

  17. esmi
    Forum Moderator
    Posted 2 years ago #

    Have you checked your wp_users table in the database?

  18. foxt
    Member
    Posted 2 years ago #

    Yes, there is no user named "WordPress".

  19. esmi
    Forum Moderator
    Posted 2 years ago #

    Then I still don't think that this a physical "user". Are you using any plugins that run cron jobs and/or that manage Posts?

  20. foxt
    Member
    Posted 2 years ago #

    Not that I know of, but I see at least one plugin that could be doing something related so I need to look into that. I'll report back. Thanks for the help!

  21. foxt
    Member
    Posted 2 years ago #

    It doesn't look like there are any plugins managing posts. There is one that runs a cron job to backup the database, but it does that at 3:00AM and the activity that is deleting posts happens at various times of the day.

    Is there a native way for me to track activity or do a trace?

  22. esmi
    Forum Moderator
    Posted 2 years ago #

  23. saintandrews
    Member
    Posted 2 years ago #

    As it turns out, what you are seeing is probably neither a hacker surreptitiously deleting your posts nor the very fine plugin ThreeWP Activity Monitor suddenly lunging for a posty snack at your expense.

    What you are seeing is almost certainly WordPress (2.9 or newer) automatically taking out the trash, that is, permanently deleting trashed posts older than those specified in wp-config.php

    http://wpengineer.com/1874/configure-wordpress-trash/

    and ThreeWP Activity Monitor simply recording this automatically preset event.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.