• Resolved flyfisher842

    (@flyfisher842)


    1. url http://www.successfulflyfishing.com/elearning/
    2. sitecheck.sucuri.net
    3. on only this site, when the line in htaccess for the 403 is active, sucuri shows a 500 header error and so does every header tool, I tried.
    ErrorDocument 400 /elearning/wp-content/plugins/bulletproof-security/400.php
    ErrorDocument 401 default
    #ErrorDocument 403 /elearning/wp-content/plugins/bulletproof-security/403.php
    ErrorDocument 404 /elearning/404.php
    4. I know this is the problem child becuase I went thru the htaccess file and commented out each code line until I found the one causing the 500 error.
    5. While sucuri may be correct, I may have a hack problem to worry about, I compared the BPS 403 in elearing to the BPS 403 from another site with notepad++ and they are identical and the other site was fine in the sitecheck test.

    So I will leave this up to smarter people than me and get some sleep.

    https://ww.wp.xz.cn/plugins/bulletproof-security/

Viewing 8 replies - 16 through 23 (of 23 total)
  • Thread Starter flyfisher842

    (@flyfisher842)

    Forgot to ask. Any problems with fastcgi 5.4 php and bps. I run fastcgi php.

    Thread Starter flyfisher842

    (@flyfisher842)

    I have reinstalled WP, got rid of fly-fishing-colorado.com/elearning. Corrrected the account root htaccess for that change.

    I have rested headers at two US checkers which yield a 500 and on UK checker which shows a 301 from www to non www and then a 200 response.

    On one of the us checkers there was a spider tool which picked up my home page fine.

    Plugin Author AITpro

    (@aitpro)

    Scanners are great for finding most obvious hacker files and code, but hidden hacker files usually are not detectable by any scanners. That is completely intentional of course to defeat any scanners. There is another possibility which I have seen before and that is damage somewhere as a result of the hacker files/code or hacker file/code removal. I assume you do not have a good backup of the site files and database since a restore would have been the first thing you would have tried. Maybe it would be smarter just to do something like this: http://forum.ait-pro.com/forums/topic/wordpress-hacked-wordpress-hack-cleanup-wordpress-hack-repair/ assuming that this site is actually currently still hacked/has hacker files and code somewhere.

    Could this be causing a problem with the success/elearning somehow?

    No

    [Login Form – POST Request Logged: 02/20/2015 – 10:29 pm]

    Nope the date is 2-20-2015

    Any problems with fastcgi 5.4 php and bps. I run fastcgi php.

    Nope none

    Check your php error log and server log for any clues.
    Maybe do a complete backup of the site and reinstall everything brand new.

    Plugin Author AITpro

    (@aitpro)

    Hmm there was an old issue with fastcgi in general causing intermittent 500 errors, but I believe most hosts have figured out/have implemented this solution: http://www.ait-pro.com/aitpro-blog/4349/misc-projects/wordpress-tips-tricks-fixes/php5-3-x-php5-4-x-user-ini-file-does-not-work-known-php5-3-x-user-ini-fastcgi-wordpress-zend-issue/

    I doubt this is the problem because whatever is going on is only happening on one of your sites and not all of them.

    Plugin Author AITpro

    (@aitpro)

    When I check headers for your site’s index.php file i get a 200.

    HTTP Status Code: 200 OK
    
    Headers: Array
    (
        [date] => Thu, 09 Apr 2015 15:09:04 GMT
        [server] => Apache
        [x-pingback] => http://successfulflyfishing.com/elearning/xmlrpc.php
        [link] => ; rel=shortlink
        [vary] => Accept-Encoding
        [content-encoding] => gzip
        [content-length] => 6496
        [connection] => close
        [content-type] => text/html; charset=UTF-8
    )
    Thread Starter flyfisher842

    (@flyfisher842)

    I found the problem. A small config error. Did not dot the is and cross the Ts

    You were right about the X factor being involved.

    Thanks for the help.

    Plugin Author AITpro

    (@aitpro)

    Yep, no problem. It is always the simple stuff that gets you. Usually after backtracking several times I find the simple things that I tend to overlook instead of the rocket science stuff that I am focusing on. 😉

    Thread Starter flyfisher842

    (@flyfisher842)

    Like you said. The simple things. I got all my wps returning 200 except the elearning which had a 301 to the 200 code. After checking my general settings, I had forgotten to put the www in the uris. The simple things.

    Now they are all 200 straight up.

    The scanner cleared the pages most suspect of being hacked.

    Go ahead and close this out after you read this post.

Viewing 8 replies - 16 through 23 (of 23 total)

The topic ‘BPS 403.php and sucuri’ is closed to new replies.