Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Error uploading video

Tagged: 

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 4:25 pm #15900

    Hello, I am having an error uploading a video, but when enabling debug mode it only shows:

    VID-20180612-WA0003.mp4(8.5 mb)x Error HTTP.

    Any help?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on June 25, 2018 at 4:27 pm #15901

    Hi Oscar,
    Is there any chance that you are using a security plugin or is there any restriction on admin-ajax.php ? http error means some issue with the end point(which is amdin-ajax.php in this case).

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 4:35 pm #15902

    I am using private site plugin, and using this code to redirect users to home

    function block_wpadmin() {
    $file = basename($_SERVER[‘PHP_SELF’]);
    if ($file == ‘wp-login.php’ || is_admin() && !current_user_can(‘edit_posts’) && $file != ‘admin-ajax.php’){
    wp_redirect( home_url() );
    exit();
    }
    }

    add_action(‘init’, ‘block_wpadmin’);

    Maybe is private site?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on June 25, 2018 at 4:39 pm #15903

    Hi Oscar,
    Please try disabling the private site plugin for a moment and then test.

    The above code that you have posted should not cause the problem.

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 4:44 pm #15904

    Nope, disabled it and got same error. Is there a way to diagnose it?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on June 25, 2018 at 4:46 pm #15905

    If you are using chrome, please open the console(ctrl+shift+I) then click on Network tab. After that try uploading and check the response from server. Does that give any pointer?

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 4:47 pm #15906

    Here is my site info.

    // Generated by the MediaPress Debug tool //

    Multisite: No

    SITE_URL: https://www.viveswinger.com
    HOME_URL: https://www.viveswinger.com

    WordPress Version: 4.9.6
    Permalink Structure: /%category%/%postname%/

    Active Theme: Kleo Child
    Parent Theme: Kleo Child

    Registered Post Stati: publish, future, draft, pending, private, trash, auto-draft, inherit, request-pending, request-confirmed, request-failed, request-completed

    // Browser Details //
    Browser Name: Firefox
    Browser Version: 60.0
    Browser User Agent String: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0
    Platform: Windows
    // End Browser Section //

    PHP Version: 7.1.16
    PHP Extensions: Core,date,libxml,openssl,pcre,sqlite3,zlib,bz2,calendar,ctype,curl,hash,filter,ftp,gettext,gmp,SPL,iconv,pcntl,readline,Reflection,session,standard,shmop,SimpleXML,mbstring,tokenizer,xml,litespeed,bcmath,dom,fileinfo,gd,imagick,imap,inotify,intl,json,exif,mcrypt,mysqli,mysqlnd,PDO,pdo_mysql,pdo_sqlite,Phar,posix,soap,xmlreader,xmlrpc,xmlwriter
    GD enabled: Yes

    //GD Info
    GD Version: bundled (2.1.0 compatible)
    FreeType Support: 1
    FreeType Linkage: with freetype
    GIF Read Support: 1
    GIF Create Support: 1
    JPEG Support: 1
    PNG Support: 1
    WBMP Support: 1
    XPM Support: 1
    XBM Support: 1
    WebP Support: 1
    JIS-mapped Japanese Font Support:
    // End GD Info

    MySQL Version: 5.6.39-cll-lve
    Web Server Info: Apache

    WordPress Memory Limit: 40M
    PHP Safe Mode: No
    PHP Memory Limit: 256M
    PHP Upload Max Size: 4M
    PHP Post Max Size: 8M
    PHP Upload Max Filesize: 4M
    PHP Time Limit: 250
    PHP Max Input Vars: 1000
    PHP Arg Separator: &
    PHP Allow URL File Open: Yes
    WP_DEBUG: Disabled
    SCRIPT_DEBUG: Disabled

    // Table Prefix //
    Table Prefix: wp_

    Show On Front: page
    Page On Front: Comunidad Swinger en línea (#9850)
    Page For Posts: Comunidad (#8307)

    Session: Enabled
    Session Name: PHPSESSID
    Cookie Path: /
    Save Path: /opt/alt/php71/var/lib/php/session
    Use Cookies: On
    Use Only Cookies: On

    DISPLAY ERRORS: N/A
    FSOCKOPEN: Your server supports fsockopen.
    cURL: Your server supports cURL.
    SOAP Client: Your server has the SOAP Client enabled.
    SUHOSIN: Your server does not have SUHOSIN installed.

    ACTIVE PLUGINS:

    (BuddyDev) BuddyPress Poke: 1.0.9
    Absolutely Glamorous Custom Admin: 6.4.1
    Akismet Anti-Spam: 4.0.8
    AMP: 0.7.1
    Beaver Builder Plugin (Lite Version): 2.1.2.4
    BP Activity Share: 1.5.0
    BP Better Messages: 1.9.7.4
    BP Disable Activation Reloaded: 1.2.1
    BP Easy Invitation Codes: 1.0
    BP Force Profile Photo: 1.0.7
    BP Friends Suggestions Widget: 1.1.0
    BP Messages Tool: 1.3
    BP Profile Search: 4.8.3
    BP xProfile Location: 1.5
    BuddyPress: 3.1.0
    Buddypress – Who clicked at my Profile?: 3.6
    BuddyPress Activity Autoloader: 1.0.2
    BuddyPress Edit Activity: 1.0.9
    BuddyPress Featured Members: 1.1.0
    BuddyPress Member Reviews: 1.0.7
    BuddyPress Simple Terms And Conditions: 1.3
    Buddy Progress Bar: 1.0.3
    CB Change Mail Sender: 1.1
    Community Activity On profile: 1.0.5
    Conditional Profile Fields for BuddyPress: 1.2.1
    Email Users: 4.8.8
    Essential Grid: 2.2.4.1
    Events Manager: 5.9.4
    Glue for Yoast SEO & AMP: 0.4.3
    Imagify: 1.8.0.1
    Invite Anyone: 1.3.20
    K Elements: 4.3.5.1
    Limit Login Attempts: 1.7.1
    List category posts: 0.76.1
    Loco Translate: 2.1.4
    Mass Messaging for Buddypress – by Alkaweb: 1.1.2
    MediaPress: 1.4.0
    MediaPress – Media View Counter: 1.0.0
    MediaPress – myCRED Addon: 1.0.0
    MediaPress Featured Content: 1.0.2
    MediaPress Media Rating: 1.0.5
    MediaPress Set Profile Photo: 1.0.2
    myCRED: 1.7.9.6
    My Private Site: 2.14.1
    PHP code snippets (Insert PHP): 2.0.4
    Post Gallery: 2.2.7
    Regenerate Thumbnails: 3.0.2
    Site Reviews: 2.15.8
    Slider Revolution: 5.4.7.4
    Social Articles: 2.8
    Theme My Login: 6.4.16
    Upload Max File Size: 1.2
    Use Google Libraries: 1.6.2.3
    Wise Chat Pro: 1.9
    WP-Optimize: 2.2.4
    WPBakery Page Builder: 5.4.7
    WP ULike: 3.3.1
    Yoast SEO: 7.6.1

    // MediaPress Settings //

    active_components: sitewide,members,groups
    default_status: public
    active_statuses: public,private
    active_types: photo,video
    extensions: jpeg,jpg,gif,png,mp4,flv,mpeg,mp3,wmv,midi,zip,gz,doc,pdf,docx,xls
    size_thumbnail: 300,300
    size_mid: 400,400
    size_large: 600,600
    single_media_size: original
    lightbox_media_size: original
    mpp_upload_space: 100
    mpp_upload_space_groups: 100
    show_upload_quota: 0
    show_max_upload_file_size: 1
    default_storage: local
    enable_remote: 1
    enable_remote_file: 0
    download_remote_file: 0
    enable_oembed: 1
    enable_debug: 1
    enable_gallery_archive: 1
    gallery_archive_slug: galeria-viveswinger
    gallery_permalink_slug: galeria-viveswinger
    sitewide_active_types: photo,video
    sitewide_photo_gallery_default_view: default
    sitewide_video_gallery_default_view: default
    has_gallery_directory: 1
    activity_upload: 1
    activity_disable_auto_file_browser: 0
    autopublish_activities: create_gallery,add_media
    activity_photo_default_view: default
    activity_video_default_view: default
    show_orphaned_media: 1
    delete_orphaned_media: 0
    activity_media_display_limit: 6
    members_active_types: photo,video
    members_enable_type_filters: 1
    members_photo_gallery_default_view: default
    members_video_gallery_default_view: default
    groups_active_types: photo,video
    groups_photo_gallery_default_view: default
    groups_video_gallery_default_view: default
    enable_group_galleries_default: yes
    contributors_can_edit: 1
    contributors_can_delete: 1
    groups_enable_my_galleries: 1
    galleries_per_page: 25
    media_per_page: 25
    media_columns: 5
    gallery_columns: 5
    show_gallery_description: 0
    show_media_description: 0
    enable_audio_playlist: 1
    enable_video_playlist: 1
    gdoc_viewer_enabled: 1
    enable_media_comment: 1
    enable_gallery_comment: 1
    load_lightbox: 1
    enable_activity_lightbox: 1
    enable_gallery_lightbox: 1
    enable_lightbox_in_gallery_media_list: 1
    mppftc_enabled_for: media,gallery
    mppftc_enabled_components: members,groups
    mppftc_enabled_types: photo
    mppftc_button_ui_places: single_media,lightbox,single_gallery,gallery_home
    mppftc_show_in_user_header: media_list
    mppftc_show_in_group_header: media_list
    mppftc_show_header_media_in_lightbox: 1
    mppftc_header_item_limit: 5
    mpp-rating-rateable-components: sitewide,members,groups
    mpp-rating-rateable-types: photo,video
    mpp-rating-required-permission: loggedin
    mpp-rating-appearance: single_media,light_box,single_gallery
    media_view_counter_count_uploader_views: 1
    media_view_counter_label_views: Vista %d veces

    // End of MediaPress Settings //

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 4:48 pm #15907

    I am using firefox.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on June 25, 2018 at 4:51 pm #15908

    Thank you for sharing.

    I am not sure which one but the http error means the end point is not found. So it could be a result of a privacy or redirection.

    When did the error started happening. Have you installed/upgraded any plugin recently or modified/added some code. Please share.

  • Participant
    Level: Enlightened
    Posts: 43
    Oscar on June 25, 2018 at 6:05 pm #15909

    Yeah, tried tracking it via firefox console, and got an error with https://www.viveswinger.com/wp-admin/admin-ajax.php

    Says error 400 Bad Request

    But have no idea how to track whats is causing the problem.

You must be logged in to reply to this topic.

This topic is: not resolved