• geoffstratton

    (@geoffstratton)


    The latest update killed several of my web sites, and it also spewed a bunch of files with names like “request.txt” and “test.php” with contents like “hi” or 0/1 into the wp-uploads directory. When I first saw this on a Wordfence report I assumed the site was hacked, but then I discovered that all my sites with WP Optimize looked like this. Is this supposed to be legitimate behavior, or is it a joke?

    Either way, it’s clear that the devs don’t do even basic QA/QC before releasing new updates. I removed this plugin and won’t be using any more products by “Team Updraft”.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Venkat Raj

    (@webulous)

    Hi @geoffstratton

    We sincerely apologies for what happened and that your site went down.

    The crash happened for some sites who use caching functionality and
    when updating from version 3.2.3 to 3.2.4 using auto update feature.

    As soon as we are aware of the problem, we released the
    fix in version 3.2.5 same day.

    Also, from you review, I’m sure that your server was hacked. None of the other users reported this kind of behavior.

    That said, we have reviewed our testing process to make sure releases work in
    every environment to ensure it never happens again.

    Thread Starter geoffstratton

    (@geoffstratton)

    “Also, from you review, I’m sure that your server was hacked. None of the other users reported this kind of behavior.”

    Here are some other reports of this behavior:

    https://ww.wp.xz.cn/support/topic/alert-from-host/

    Whatever the case, the behavior vanished when I removed the WP-Optimize plugin and cleaned its files and directories off my servers’ filesystems. Not a good look for the Updraft company.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Avoid — it’ll kill your web site’ is closed to new replies.