Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

net::ERR_INCOMPLETE_CHUNKED_ENCODING

Tagged: ,

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 3:41 am #9741

    Did some more testing… Dimension is not the issue, but file size exceeding 4mb allowed. The page goes blank, yet the page wants to refresh, but just spins waiting…waiting…waiting *hint*. Wondering if it’s a Chrome browser issue? Let me experiment… please hold for transmission completion (&$WT)EDUd98r098w0$T)(_DFSDff-9SF(F*F

    Transmission Completed:

    Okay, issue occurs with both Chrome and Firefox.

    With Chrome, it just keeps trying to refresh page with white screen giving a net::ERR_INCOMPLETE_CHUNKED_ENCODING

    Firefox, white screen, but page completes, ending in white page.

    Firefox Console actually gives some data:

    Post:

    —————————–942546072085

    Content-Disposition: form-data; name=”file”; filename=”images-3.jpg”

    Content-Type: image/jpeg

    ÿØÿá\u000e;Exif\u0000\u0000II*\u0000\b\u0000\u0000\u0000\u000f\u0000\u0000\u0001\u0003\u0000\u0001\u0000\u0000\u0000,\u000f\u0000\u0000\u0001\u0001\u0003\u0000\u0001\u0000\u0000\u0000a\u000b\u0000\u0000\u0002\u0001\u0003\u0000\u0003\u0000\u0000\u0000Â\u0000\u0000\u0000\u0006\u0001\u0003\u0000\u0001\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u000e\u0001\u0002\u0000\u0017\u0000\u0000\u0000È\u0000\u0000\u0000\u000f\u0001\u0002\u0000\u0016\u0000\u0000\u0000ß\u0000\u0000\u0000\u0010\u0001\u0002\u0000\u0005\u0000\u0000\u0000õ\u0000\u0000\u0000\u0012\u0001\u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0015\u0001\u0003\u0000\u0001\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u001a\u0001\u0005\u0000\u0001\u0000\u0000\u0000ú\u0000\u0000\u0000\u001b\u0001\u0005\u0000\u0001\u0000\u0000\u0000\u0002\u0001\u0000\u0000(\u0001\u0003\u0000\u0001\u0000\u0000\u0000\u0002\u0000\u0000\u00001\u0001\u0002\u0000$\u0000\u0000\u0000\n\u0001\u0000\u00002\u0001\u0002\u0000\u0014\u0000\u0000\u0000.\u0001\u0000\u0000i‡\u0004\u0000\u0001\u0000\u0000\u0000D\u0001\u0000\u0000Ü\u0003\u0000\u0000\b\u0000\b\u0000\b\u0000OLYMPUS DIGITAL CAMERA\u0000OLYMPUS IMAGING CORP.\u0000E-M5\u0000ÀÆ-\u0000\u0010’\u0000\u0000ÀÆ-\u0000\u0010’\u0000\u0000Adobe Photoshop CC 2014 (Macintosh)\u00002015:03:06 19:58:57\u0000\u0000\u0000&\u0000š‚\u0005\u0000\u0001\u0000\u0000\u0000\u0012\u0003\u0000\u0000‚\u0005\u0000\u0001\u0000\u0000\u0000\u001a\u0003\u0000\u0000″ˆ\u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000’ˆ\u0003\u0000\u0001\u0000\u0000\u0000È\u0000\u0000\u00000ˆ\u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0007\u0000\u0004\u0000\u0000\u00000230\u0003\u0002\u0000\u0014\u0000\u0000\u0000″\u0003\u0000\u0000\u0004\u0002\u0000\u0014\u0000\u0000\u00006\u0003\u0000\u0000\u0001’\n\u0000\u0001\u0000\u0000\u0000J\u0003\u0000\u0000\u0002’\u0005\u0000\u0001\u0000\u0000\u0000R\u0003\u0000\u0000\u0004’\n\u0000\u0001\u0000\u0000\u0000Z\u0003\u0000\u0000\u0005’\u0005\u0000\u0001\u0000\u0000\u0000b\u0003\u0000\u0000\u0007’\u0003\u0000\u0001\u0000\u0000\u0000\u0005\u0000\u0000\u0000\b’\u0003\u0000\u0001\u0000\u0000\u0000\u0004\u0000\u0000\u0000\t’\u0003\u0000\u0001\u0000\u0000\u0000\b\u0000\u0000\u0000\n’\u0005\u0000\u0001\u0000\u0000\u0000j\u0003\u0000\u0000\u0001 \u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0002 \u0004\u0000\u0001\u0000\u0000\u0000,\u000f\u0000\u0000\u0003 \u0004\u0000\u0001\u0000\u0000\u0000a\u000b\u0000\u0000\u000e¢\u0005\u0000\u0001\u0000\u0000\u0000r\u0003\u0000\u0000\u000f¢\u0005\u0000\u0001\u0000\u0000\u0000z\u0003\u0000\u0000\u0010¢\u0003\u0000\u0001\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0000£\u0007\u0000\u0001\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0002£\u0007\u0000\b\u0000\u0000\u0000‚\u0003\u0000\u0000\u0001¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002¤\u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0003¤\u0003\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0004¤\u0005\u0000\u0001\u0000\u0000\u0000Š\u0003\u0000\u0000\u0005¤\u0003\u0000\u0001\u0000\u0000\u0000″\u0000\u0000\u0000\u0006¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0007¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\b¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\t¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\n¤\u0003\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u00001¤\u0002\u0000\n\u0000\u0000\u0000’\u0003\u0000\u00002¤\u0005\u0000\u0004\u0000\u0000\u0000œ\u0003\u0000\u00004¤\u0002\u0000\u0014\u0000\u0000\u0000¼\u0003\u0000\u00005¤\u0002\u0000\n\u0000\u0000\u0000Ð\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000ú\u0000\u0000\u0000\n\u0000\u0000\u0000\u0001\u0000\u0000\u00002015:03:06 19:01:02\u00002015:03:06 19:01:02\u0000XŒy\u0000@

    Reponse:

    Raw Data:

    <!DOCTYPE html>

    <!–[if lt IE 7]>

    <html class=”no-js lt-ie9 lt-ie8 lt-ie7″ lang=”en-US”><![endif]–>

    <!–[if IE 7]>

    <html class=”no-js lt-ie9 lt-ie8″ lang=”en-US”><![endif]–>

    <!–[if IE 8]>

    <html class=”no-js lt-ie9″ lang=”en-US”><![endif]–>

    <!–[if IE 9]>

    <html class=”no-js lt-ie10″ lang=”en-US”><![endif]–>

    <!–[if gt IE 9]><!–>

    <html class=”no-js” lang=”en-US”>

    <!–<![endif]–>

    <head>

    <meta http-equiv=”X-UA-Compatible” content=”IE=9; IE=8; IE=7; IE=EDGE”/>

    <meta charset=”UTF-8″>

    <meta name=”viewport” content=”width=device-width, initial-scale=1.0″>

    <link rel=”profile” href=”http://gmpg.org/xfn/11″&gt;

    <link rel=”pingback” href=”http://localhost/website/xmlrpc.php”&gt;

    <!– fading out link START –>

    <!–<script type=”text/javascript” src=”/js/jquery-latest.min.js” charset=”utf-8″> </script> –>

    <!– <script type=”text/javascript”>

    // delegate all clicks on “a” tag (links)

    $(document).on(“click”, “a”, function () {

    // get the href attribuSize limit has been reached. Click here to load more.

    ——————————————————–

    So, I suspect it might be the code I need $(document).on(“click”, “a”, function () {

    MMmmmmm, what a pickle I am in.

    Any suggestions?

    The JS code $(document).on(“click”, “a”, function () { is injected into header to help with loading a div that shows “Loading” when a link in clicked. Really need that code, but I would really like to use your plugin, and it’s just the too big of a file (larger than 4mb) giving me troubles.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 2, 2017 at 5:17 am #9742

    Please try removing that js code and reloading page and trying again.

    Once it works, I will assist you with showing your loader for the link.

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 5:30 am #9743

    I removed the js but that couldn’t have been it = I discovered all that js code was commented out (I was considering using it, but forgot I didn’t want it, but hey, header is clean now 😉

    Now Console stops at hr … see below.

    <!DOCTYPE html>

    <!–[if lt IE 7]>

    <html class=”no-js lt-ie9 lt-ie8 lt-ie7″ lang=”en-US”><![endif]–>

    <!–[if IE 7]>

    <html class=”no-js lt-ie9 lt-ie8″ lang=”en-US”><![endif]–>

    <!–[if IE 8]>

    <html class=”no-js lt-ie9″ lang=”en-US”><![endif]–>

    <!–[if IE 9]>

    <html class=”no-js lt-ie10″ lang=”en-US”><![endif]–>

    <!–[if gt IE 9]><!–>

    <html class=”no-js” lang=”en-US”>

    <!–<![endif]–>

    <head>

    <meta http-equiv=”X-UA-Compatible” content=”IE=9; IE=8; IE=7; IE=EDGE”/>

    <meta charset=”UTF-8″>

    <meta name=”viewport” content=”width=device-width, initial-scale=1.0″>

    <link rel=”profile” href=”http://gmpg.org/xfn/11″&gt;

    <link rel=”pingback” href=”http://localhost/website/xmlrpc.php”&gt;

    <!– END fading out page links –>

    <!– START character count per #id –>

    <!– END character count per #id –>

    <!– Fav and touch icons –>

    <link rel=”shortcut icon” href=”http://localhost/website/wp-content/uploads/2017/05/head.png”&gt;

    <link rel=”apple-touch-icon-precomposed” hr

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 2, 2017 at 5:32 am #9744

    Please point me to your site. the console should never show you the html of the page in response.

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 5:46 am #9745

    Sorry, website local hosted on WAMP. Mmmmm, let me dig around a bit and see if I can’t come up with something… . Update with some kind of answer, or even if I don’t, at least I can say what I decided to do. Thanks!

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on July 2, 2017 at 5:58 am #9746

    Hi,
    Something is wrong there. The response will never be html from MediaPress. It should be some json value.

    Can you please try testing MediaPress on a fresh install on your local and see if it is working? or you can test by disabling other plugins and reverting to twentyseventeen just for testing.

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 5:59 am #9747

    Sure… let me test around.

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 6:35 am #9748

    Well, it’s not a theme issue. Can’t say if it’s a plugin issue, I have too many plugins, so that would take some time to decipher who and which one, or mixing and matching. I admit, your plugins are the only plugins I have ever came across that needed so much attention, revisions, and tweaks, of all the ones I’ve purchased (20 of them), or downloaded for free (20 of them). Like the Flag Content plugin works with all plugins, but… yup, not MediaPress. Not to say any of them work exactly how I like or how I want them to look, out of the box (hence the tweaks). Oh well, I can tell I’m getting exhausted. I’m deviating from the mission. Haven’t tried a fresh install, but that wouldn’t really matter. Mmmm, I’ll try and hit it again tomorrow afternoon. Thanks for your help all the same. Hopefully I can come back with an answer, else my resolution.

  • Participant
    Level: Master
    Posts: 171
    JohnnyNW on July 2, 2017 at 6:47 am #9749

    Note: some plugins of yours does work out of box, but I think the problem maybe that your team is building too many plugins. Just look at some of the code, too fastly written (you can tell by all the misspellings). Maybe your team should pause, like you did with MediaPress, and focus on current products. Remember the other day we had 2 of your plugins turned on at the same time broke each other — your own plugins broke themselves. Just some advise… slow and easy wins the race 😉

You must be logged in to reply to this topic.

This topic is: not resolved