I backed up my site with updraft.

I deleted the contents of public html and uploaded WordPress from a fresh download.

Went to Oldwhitby.ca and got the Language page

2 pages later entered database name “Oldwhitby” username “Admin”, entered a password, host “localhost”, and table prefix “wp_”

I get “Error establishing a database connection”

I believe it is supposed to create a a wp-config.php from the wp-config- sample.php but when I look in the file manager there is no wp-config.php file and the only database is the “information schema”.

So I created a wp-config.php file with the above parameters

Try again and I get “The file wp-config.php already exists. If you need to reset any of the configuration items in this file, please delete it first. You may try installing now.”

I’ve been around this loop half a dozen times. What am I doing wrong?

Can a dev please confirm that this line of code found in /public/wp-content/themes/FifteenTen/config.php is not part of the theme? It’s being flagged as misc/injected code. Would like to confirm before we remove.

The line we’re concerned about: <?php print(“upload::https://nothing”);

Cheers

I changed the names in Settings – General to https:// and it I got CFN#0005 and the site wouldn’t work. Because I couldn’t get into wp-admin anymore I had to go into my config file and force it with:
define(‘WP_HOME’,’https://testsite.ca’);
define(‘WP_SITEURL’,’https://testsite.ca’);
Now it worked and I could get back into my admin but the names in Settings – General are now greyed out and I can’t change anything. If I take out the ‘define’ code in congig.php I go back to getting CFN#0005.
It’s a total mess and I’m so frustrated.

I’m not showing actual domain because last time I did that on here my client got tons of spam saying they saw their post on a forum and could help them. If you think you can help I will message you the domain.
Thank you!

define('DISALLOW_FILE_EDIT', true);

Which I place just before the line:

/*That’s all, stop editing! Happy blogging. */

This works on the localhost installation, but not on the live site? Any help or suggestions greatly appreciated.

I am getting the following message displayed on-top of all my web-pages on this specific site.

” Notice: Constant FS_CHMOD_DIR already defined in /home/mc4ebqy52sd6/public_html/xxx.org/wp-config.php on line 101 ”

I have replaced the xxx.org with the actual website.

I am a armature on WordPress however,I had a look at the config.php file and the l01 line is just a text line stating the following :

100* For information on other constants that can be used for debugging,
101* visit the Codex.
102*

To reslove the issue I a have already attempted the following:
Deactivated all plugins one by one.
Changed to the default theme
Still no luck!

Any help to resolve this issue would be highly appreciative.

“The Wordfence Web Application Firewall cannot run. The configuration files are corrupt or inaccessible by the web server, which is preventing the WAF from functioning. Please verify the web server has permission to access the configuration files. You may also try to rebuild the configuration file by clicking here. It will automatically resume normal operation when it is fixed. “

The PHP log shows there is an error reading the config data.

[31-Aug-2018 21:25:04 UTC] Error reading Wordfence Firewall config data, configuration file could be corrupted or inaccessible. Path: C:\Webs\~Live\fda/wp-content/wflogs/config.php

We have tried re-installing and tried recreating the config file, but we cannot get it work work

As you can see, it appears WordFence is trying to load the config path using a mix of
forward slashes and backslashes. If it used one other the other, it would work, but the mix of ‘\’ and ‘/’ gives this error.

Is there a way to fix this and force Wordfence to use ALL ‘/’ or ALL ‘\’ in the path.

In case you need to know, we are using IIS 8.5 / PHP 7.2.2 / WordPress 4.9.8 / WordFence 7.1.11 (1534873799)

thanks.

After emails not reaching users, my host discovered that it’s servers were blocked by spamhaus.org.

They are pointing to the below files being infected.

/wflogs/ips.php: YARA.eitest_injection_1.UNOFFICIAL FOUND
/wflogs/attack-data.php: YARA.eitest_injection_1.UNOFFICIAL FOUND
/wflogs/config.php: YARA.eitest_injection_1.UNOFFICIAL FOUND
/wflogs/rules.php: YARA.eitest_injection_1.UNOFFICIAL FOUND

I’ve copied the files for record, but could I just delete these files on the server?

Thanks