Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

error 404 when uploading on buddypress with mediapress

Tagged: 

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 19, 2019 at 9:12 pm #26550

    Hi

    when i upload a documents, vid, pic or whatever i get the 404 error on almost all of my website. I use the mediapress plugin for that.

    i’ve tried to reset permalinks – it solves the problem only until next upload.

    does anyone know how to fix this.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 19, 2019 at 10:50 pm #26552

    Hi Diyan,
    Welcome to BuddyDev.

    Please post me the log from MediaPress->Tools sections. I am guessing it is a conflict with some plugin.

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 19, 2019 at 10:57 pm #26554

    // Generated by the MediaPress Debug tool //

    Multisite: No

    SITE_URL: https://home.globalregenerative.academy
    HOME_URL: https://home.globalregenerative.academy

    WordPress Version: 5.2.4
    Permalink Structure: /%postname%/

    Active Theme: Aardvark Child 1.0
    Parent Theme: Aardvark Child 1.0

    Registered Post Stati: publish, future, draft, pending, private, trash, auto-draft, inherit, request-pending, request-confirmed, request-failed, request-completed, in-progress, failed, wc-pending, wc-processing, wc-on-hold, wc-completed, wc-cancelled, wc-refunded, wc-failed

    // Browser Details //
    Browser Name: Chrome
    Browser Version: 78.0.3904.97
    Browser User Agent String: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36
    Platform: Windows
    // End Browser Section //

    PHP Version: 5.6.22
    PHP Extensions: Core,date,ereg,libxml,openssl,pcre,sqlite3,zlib,bcmath,bz2,calendar,ctype,curl,dba,dom,enchant,hash,fileinfo,filter,ftp,gd,gettext,SPL,iconv,session,intl,json,ldap,mbstring,mcrypt,standard,mysqlnd,mysqli,pcntl,mysql,PDO,pdo_mysql,pdo_pgsql,pdo_sqlite,pgsql,Phar,posix,pspell,readline,Reflection,imap,shmop,SimpleXML,soap,sockets,exif,sysvmsg,sysvsem,tidy,tokenizer,wddx,xml,xmlreader,xmlrpc,xmlwriter,xsl,zip,cgi-fcgi,bz2_filter,mailparse,memcache,geoip,imagick,ssh2,redis,mhash,ionCube Loader
    GD enabled: Yes

    //GD Info
    GD Version: bundled (2.1.0 compatible)
    FreeType Support: 1
    FreeType Linkage: with freetype
    T1Lib Support: 1
    GIF Read Support: 1
    GIF Create Support: 1
    JPEG Support: 1
    PNG Support: 1
    WBMP Support: 1
    XPM Support: 1
    XBM Support: 1
    WebP Support:
    JIS-mapped Japanese Font Support:
    // End GD Info

    MySQL Version: 5.5.54-38.7-log
    Web Server Info: Apache

    WordPress Memory Limit: 40M
    PHP Safe Mode: No
    PHP Memory Limit: 1024M
    PHP Upload Max Size: 256M
    PHP Post Max Size: 256M
    PHP Upload Max Filesize: 256M
    PHP Time Limit: 180
    PHP Max Input Vars: 2000
    PHP Arg Separator: &
    PHP Allow URL File Open: Yes
    WP_DEBUG: Disabled
    SCRIPT_DEBUG: Disabled

    // Table Prefix //
    Table Prefix: wpvl_

    Show On Front: page
    Page On Front: Home Original (#100000091)
    Page For Posts: (#0)

    Session: Disabled
    Session Name: PHPSESSID
    Cookie Path: /
    Save Path: /tmp
    Use Cookies: On
    Use Only Cookies: Off

    DISPLAY ERRORS: On (1)
    FSOCKOPEN: Your server supports fsockopen.
    cURL: Your server supports cURL.
    SOAP Client: Your server has the SOAP Client enabled.
    SUHOSIN: Your server does not have SUHOSIN installed.

    ACTIVE PLUGINS:

    Aardvark Plugin: 2.2.3
    Akismet Anti-Spam: 4.1.2
    Autocomplete WooCommerce Orders: 1.1.0
    Autoptimize: 2.5.1
    BNE Testimonials: 2.0.4
    BP Profile Search: 5.1
    BuddyPress: 5.0.0
    BuddyPress Group Email Subscription: 3.9.4
    BuddyPress to WordPress Full Sync: 0.3.3
    BuddyPress Xprofile Custom Field Types: 1.0.9
    Contact Form 7: 5.1.4
    Disable Gutenberg: 1.9
    Duplicate Page: 4.0
    Elementor: 2.7.3
    Elementor Addon Elements: 1.6
    Envato Market: 2.0.2
    Essential Addons for Elementor: 3.3.2
    Hide Admin Bar: 0.3.9.8
    JetSticky For Elementor: 1.0.1
    Kadence WooCommerce Elementor: 1.0.3
    Livemesh Addons for Elementor: 2.8
    Loco Translate: 2.3.0
    MediaPress: 1.4.6
    Paid Memberships Pro: 2.1.2
    Paid Memberships Pro – BuddyPress Add On: 1.2.4
    Paid Memberships Pro – Register Helper Add On: 1.4
    Paid Memberships Pro – WooCommerce Add On: 1.6.1
    Premium Addons for Elementor: 3.7.7
    Really Simple SSL: 3.2.5
    Redirection: 4.4.2
    Responsive for WPBakery Page Builder: 3.1
    Smart Slider 3: 3.3.22
    String Locator: 2.3.1
    Tutor LMS: 1.4.2
    Ultimate Carousel For Visual Composer: 2.6
    Ultimate Reviewer: 1.3.2
    Videojs HTML5 Player: 1.1.3
    W3 Total Cache: 0.10.2
    WooCommerce: 3.7.0
    WooCommerce add to cart Text change: 1.5
    WooCommerce HSS Extension for Streaming Video: 2.83
    Woo Commmerce Addon for WP Courseware: 1.4.2
    WP AutoTerms: 2.2.6
    WPBakery Page Builder: 5.7
    WP User Avatar: 2.2.4
    Yoast SEO: 12.2

    // MediaPress Settings //

    active_components: sitewide,members,groups
    default_status: public
    active_statuses: public,private
    active_types: photo,video,audio,doc
    extensions: jpeg,jpg,gif,png,mp4,flv,mpeg,mp3,wmv,midi,zip,gz,doc,pdf,docx,xls
    size_thumbnail: 200,200,1
    size_mid: 350,350,1
    size_large: 600,600
    single_media_size: large
    lightbox_media_size: large
    mpp_upload_space: 200
    mpp_upload_space_groups: 5000
    show_upload_quota: 0
    show_max_upload_file_size: 1
    default_storage: local
    enable_file_upload: 1
    enable_remote: 1
    enable_remote_file: 0
    download_remote_file: 0
    enable_oembed: 1
    enable_debug: 1
    enable_gallery_archive: 0
    gallery_archive_slug: site-galleries
    gallery_permalink_slug: site-gallery
    sitewide_active_types: photo,video,audio,doc
    sitewide_photo_gallery_default_view: default
    sitewide_video_gallery_default_view: default
    sitewide_audio_gallery_default_view: default
    sitewide_doc_gallery_default_view: default
    has_gallery_directory: 1
    activity_upload: 1
    activity_disable_auto_file_browser: 0
    autopublish_activities: create_gallery,add_media
    activity_photo_default_view: default
    activity_video_default_view: default
    activity_audio_default_view: default
    activity_doc_default_view: default
    show_orphaned_media: 0
    delete_orphaned_media: 0
    activity_media_display_limit: 6
    members_active_types: photo,video,audio,doc
    members_enable_type_filters: 1
    members_photo_gallery_default_view: default
    members_video_gallery_default_view: default
    members_audio_gallery_default_view: default
    members_doc_gallery_default_view: default
    groups_active_types: photo,video,audio,doc
    groups_photo_gallery_default_view: default
    groups_video_gallery_default_view: default
    groups_audio_gallery_default_view: default
    groups_doc_gallery_default_view: default
    enable_group_galleries_default: yes
    contributors_can_edit: 1
    contributors_can_delete: 1
    groups_enable_my_galleries: 1
    galleries_per_page: 12
    media_per_page: 20
    media_columns: 4
    gallery_columns: 4
    show_gallery_description: 0
    show_media_description: 0
    enable_audio_playlist: 1
    enable_video_playlist: 1
    gdoc_viewer_enabled: 1
    enable_media_comment: 1
    enable_gallery_comment: 1
    load_lightbox: 1
    lightbox_media_only: 0
    enable_activity_lightbox: 1
    enable_gallery_lightbox: 1
    enable_lightbox_in_gallery_media_list: 1

    // End of MediaPress Settings //

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 19, 2019 at 11:01 pm #26555

    Hi Diyan,
    Thank you.

    I am not seeing anything that raises concern.

    Still, Can you please disable the W3 Total cache and Redirection plugin and try if it works(Just trying to find out the conflict point).

    Regards
    Brajesh

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 19, 2019 at 11:08 pm #26556

    Hi Brajesh,

    no it keeps giving me the error 404. anything else we might try.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 19, 2019 at 11:26 pm #26561

    Hi Diyan,
    I am sorry but I do not see other reason.

    Is there restrictions on BuddyPress applied by Paid Membership pro.

    Is the media url correct(link to media page but showing 404?). If that is the case, something is modifying WordPress posts query.

    Please try disabling these 1 by one(After finding the conflict, you can re enable theme as I will adsd compatibility if any).

    1. Paid Membership Pro and the addons – If it doe not solve, re enable it
    2. Tutor LMS

    Or do you have any staging site where you can disable the adons one by one and test which on eis conflicting.

    If I get which is is conflicting, I will be able to resolve it.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 19, 2019 at 11:40 pm #26562

    Hi Brajesh,

    it seems it is from the tutor lms. How we can fix it to work. Thank you!

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on November 19, 2019 at 11:49 pm #26563

    Hi,
    I am assuming you are using the Tutor LMS plugin for wp.org.

    Please allow me 2-3 days to look into it. It is most probably filtering on posts query and causing it. We should have a solution(or details to report to them and get it resolve).

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 20, 2019 at 12:23 am #26567

    Thank you. Will wait for 2-3 days for a follow up from your side.

  • Participant
    Level: Initiated
    Posts: 6
    Diyan Ganev on November 20, 2019 at 8:27 pm #26618

    Hi Brajesh,

    hope you are well. I am using this plugin https://wordpress.org/plugins/tutor/ which is the main tutor lms.
    Hope we can fix that integration with the buddypress platform as there is barely no alternative and I already have so much data uploaded on the tutor.

    Hope we can bring things forward.

You must be logged in to reply to this topic.

This topic is: not resolved