Notifications
Clear all

Limited Support

Our team is currently on holiday, so support will be limited during this period. Response times may be slower than usual, and some inquiries may be delayed.
We appreciate your patience and understanding, and we’ll resume our usual support by the end of August.

 

wpForo 1.x.x [Closed] something deletes wpf functions.php automatically everytime

7 Posts
3 Users
0 Reactions
1,564 Views
moxen
Posts: 4
Topic starter
(@moxen)
Active Member
Joined: 7 years ago

I have wp 5.0.3 and i tested wpforo on 4.x.x too

the wpf-includes/functions.php disapears after a while(shorter than two days)

no more plugins

the oblique theme 1 and 2 tested

functions.php renamed too functionx.php and replaced on line158

and i even removed line 161(if is wpf-admin or something like this) but the functions.php will go with no reason and i have error 500 again i will change to buddypress or something else but i liked foro and i like too know what is happening

6 Replies
Posts: 393
(@anonymous3542)
Honorable Member
Joined: 8 years ago

@moxen do you have any security plugins like Shield for example that are deleting non core WordPress files ?

1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4

no I deleted everything, themes, plugins , only wp and wpforo and result was same

this time I changed functions file permission to read/execute(removed write) and for the wpf-includes directory too, im waiting for re-crash

I don't know if my host provider uses any security software but im completely sure I have nothing like that.

Posts: 393
(@anonymous3542)
Honorable Member
Joined: 8 years ago

@moxen do you have access to the Apache error log ? That may provide some insight as to what's going on here. This doesn't sound like a permissions issue. You may have an infected webserver. 

1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4

I will ask my host provider, and it happend again.

i noticed my host(cpanel) has an anti-virus 

http://makuhost.ir:2**2/cps**************3/frontend/paper_lantern/clamavconnector/newscan.html

I scanned my public_Html dir but nothing found and functions.php is still there

and i found this on my dir 

Posts: 1599
(@anonymous20)
Noble Member
Joined: 9 years ago

This is probably a hosting problem, and to be honest your hosting company (Hetzner) is not among the good ones.

Is bikaran.org your domain  or direct3d.ir ?

All that smell like a hacked server.

1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4
Posted by: Anonymous20

This is probably a hosting problem, and to be honest your hosting company (Hetzner) is not among the good ones.

Is bikaran.org your domain  or direct3d.ir ?

All that smell like a hacked server.

hi and thanks for reply

probably your right and hetzer is not the best but im sure in ratio of price and performance its best option I have, i'm paying about 1$ for a year and 1gb cpanel and other options and i have 24-7 support of its reseller and this is first time i have this problem.

my main domain was bikaran.org and direct3d.ir is an addon domain i have no limit in addon domains and im using this option.

my host provider told me it's by their anti-virus , i asked for more details and if i have something ill share it with you.