Forum Replies Created

Viewing 5 replies - 16 through 20 (of 20 total)
  • Thread Starter gonebeta

    (@gonebeta)

    Just so you know, this error appears in front of all plugins active on the site

    Thread Starter gonebeta

    (@gonebeta)

    Thanks! I was able to activate the new one (version 2.0.1) but it came up with this error:

    Fatal error: Uncaught Error: Call to undefined function fsckeycdn_status() in /srv/users/serverpilot/apps/****tips/public/wp-content/plugins/full-site-cache-kc/full-site-cache-kc.php:59 Stack trace: #0 /srv/users/serverpilot/apps/****tips/public/wp-includes/plugin.php(235): fsckeycdn_notice_meta(Array, ‘advanced-excerp…’) #1 /srv/users/serverpilot/apps/****tips/public/wp-admin/includes/class-wp-plugins-list-table.php(764): apply_filters(‘plugin_row_meta’, Array, ‘advanced-excerp…’, Array, ‘all’) #2 /srv/users/serverpilot/apps/****tips/public/wp-admin/includes/class-wp-plugins-list-table.php(485): WP_Plugins_List_Table->single_row(Array) #3 /srv/users/serverpilot/apps/****tips/public/wp-admin/includes/class-wp-list-table.php(1213): WP_Plugins_List_Table->display_rows() #4 /srv/users/serverpilot/apps/****tips/public/wp-admin/includes/class-wp-list-table.php(1141): WP_List_Table->display_rows_or_placeholder() #5 /srv/users/serverpilot/apps/****tips/public/wp-admin/plugins.php(545 in /srv/users/serverpilot/apps/****tips/public/wp-content/plugins/full-site-cache-kc/full-site-cache-kc.php on line 59

    Thread Starter gonebeta

    (@gonebeta)

    Thanks! I can confirm there was no function file there and there is no function file in the link you provided up there.

    Please check again.
    There are 6 files there:

    readme.txt
    README.md
    LICENSE
    index.php
    full-site-cache-kc.php
    include.php

    No functions.php file there

    @smazsyr

    I had the same problem. I went ahead and purged the records and the site is back to normal now.

    Hey Guys! I had the same problem for 2 months!

    Did everything suggested but the idiots kept coming back. Thank God for Whooami who suggested looking at ftp log! Well …I didn’t find anything in the ftp log… but behold! they were all in my access log!

    This is how I found him: I opened my access log for the day( opened it in wordpad) and did a search for header.php ( in your case you should search for footer.php). I found only two ip addresses accessed that file in the last two hours. Here is what it looks like
    ……………..
    66.36.246.108 – – [27/Dec/2009:14:48:34 -0500] “POST /wp-content/uploads/2007/03/wp-inclode.php?f=/homepages/18/ddd/htdocs/mydomain name/wp-content/themes/my theme name/header.php HTTP/1.1” 200 133 http://www.mydomain.com “-” “-” “-“

    They uploaded two files 4 months ago : wp-inclode.php and fotter.php with some codes.

    I went back and check the access log for the last two days and found the same pattern ( with different IP) always looking for the same files. The time of access corresponds to the time the links show up on my site( about every 4 hours).

    Funny thing is that after they inject the code, the same ip address comes back as a google bot to check if it is working.

    66.36.246.108 – – [27/Dec/2009:14:48:39 -0500] “GET / HTTP/1.1” 200 41547 http://www.mydomainname .com “-” “Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)” “-“

    Bottom line, search for the file name in your access log, find the path to the rouge files and delete them!

    hope that help!

    p.s. Sorry for my bad English

Viewing 5 replies - 16 through 20 (of 20 total)