Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 9, 2021 at 1:28 am in reply to: [Resolved] MediaPress Local Transcoder #40915

    That’s great. I appreciate your work. Thanks again!

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 11:42 pm in reply to: [Resolved] MediaPress Local Transcoder #40912

    Okay, so I have a question with that being the case. Would it make sense for you to implement that code into your design as the default rather than what you have if it is more universally compatible? My concern is that you’ll release an update in the future rendering my setup broken. Thank you for your help!

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 8:50 pm in reply to: [Resolved] MediaPress Local Transcoder #40905

    IT WORKS! What was the issue you found?

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 3:55 pm in reply to: [Resolved] MediaPress Local Transcoder #40903
    This reply has been marked as private.
  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 3:38 pm in reply to: [Resolved] MediaPress Local Transcoder #40901

    I ran this in terminal, FYI:

    grep disable_functions /opt/cpanel/ea-php73/root/etc/php.ini

    and got this result:

    disable_functions =

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 3:37 pm in reply to: [Resolved] MediaPress Local Transcoder #40900

    shell_exec is definitely not still disabled. I’ve checked and double-checked. I cleared my logs (both PHP and WordPress debug) this morning, and it’s not showing any new errors for either one.

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 2:58 pm in reply to: [Resolved] MediaPress Local Transcoder #40895

    So for the sake of trying everything, I installed another transcoder plugin called “Spreebie Transcoder” and activated it. When I went to the settings of that plugin, it has the status of “FFMPEG: Found”.

    FFmpeg:

    Server: Apache
    PHP: 7.3.31
    EXEC: ENABLED
    FFMPEG: FOUND

    I believe it’s your plugin that is having the issue in my case.

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 2:19 pm in reply to: [Resolved] MediaPress Local Transcoder #40894

    That’s not it either. I had already disabled it for the specific domain (and globally) using that method.

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 4:23 am in reply to: [Resolved] MediaPress Local Transcoder #40887

    That’s what I did already to enable shell_exec, but it didn’t change anything. It still doesn’t work. I also restarted Apache/PHP-FPM and the VPS itself. Still nothing…

  • Participant
    Level: Initiated
    Posts: 14
    David Dietz on October 8, 2021 at 1:14 am in reply to: [Resolved] MediaPress Local Transcoder #40885

    Update:
    I found an error log with the following info:

    [07-Oct-2021 22:14:36 UTC] PHP Warning: shell_exec() has been disabled for security reasons in /home/lindseylockett/public_html/community/wp-content/plugins/mpp-local-transcoder/src/core/class-mpplt-process.php on line 63