AI Search
Classic Search
 Search Phrase:
 Search Type:
Advanced search options
 Search in Forums:
 Search in date period:

 Sort Search Results by:

AI Assistant
Notifications
Clear all

[Closed] something deletes wpf functions.php automatically everytime

7 Posts
3 Users
0 Reactions
1,998 Views
moxen
Posts: 4
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@moxen)
Active Member
Joined: 7 years ago
[#7664]

I have wp 5.0.3 and i tested wpforo on 4.x.x too

the wpf-includes/functions.php disapears after a while(shorter than two days)

no more plugins

the oblique theme 1 and 2 tested

functions.php renamed too functionx.php and replaced on line158

and i even removed line 161(if is wpf-admin or something like this) but the functions.php will go with no reason and i have error 500 again i will change to buddypress or something else but i liked foro and i like too know what is happening


6 Replies
Posts: 392
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@anonymous3542)
Honorable Member
Joined: 9 years ago

@moxen do you have any security plugins like Shield for example that are deleting non core WordPress files ?


1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian

no I deleted everything, themes, plugins , only wp and wpforo and result was same

this time I changed functions file permission to read/execute(removed write) and for the wpf-includes directory too, im waiting for re-crash

I don't know if my host provider uses any security software but im completely sure I have nothing like that.


Posts: 392
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@anonymous3542)
Honorable Member
Joined: 9 years ago

@moxen do you have access to the Apache error log ? That may provide some insight as to what's going on here. This doesn't sound like a permissions issue. You may have an infected webserver. 


1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian

I will ask my host provider, and it happend again.

i noticed my host(cpanel) has an anti-virus 

http://makuhost.ir:2**2/cps**************3/frontend/paper_lantern/clamavconnector/newscan.html

I scanned my public_Html dir but nothing found and functions.php is still there

and i found this on my dir 


Posts: 1593
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@anonymous20)
Noble Member
Joined: 10 years ago

This is probably a hosting problem, and to be honest your hosting company (Hetzner) is not among the good ones.

Is bikaran.org your domain  or direct3d.ir ?

All that smell like a hacked server.


1 Reply
moxen
(@moxen)
Joined: 7 years ago

Active Member
Posts: 4
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
Posted by: Anonymous20

This is probably a hosting problem, and to be honest your hosting company (Hetzner) is not among the good ones.

Is bikaran.org your domain  or direct3d.ir ?

All that smell like a hacked server.

hi and thanks for reply

probably your right and hetzer is not the best but im sure in ratio of price and performance its best option I have, i'm paying about 1$ for a year and 1gb cpanel and other options and i have 24-7 support of its reseller and this is first time i have this problem.

my main domain was bikaran.org and direct3d.ir is an addon domain i have no limit in addon domains and im using this option.

my host provider told me it's by their anti-virus , i asked for more details and if i have something ill share it with you. 


Share: