Not able to restore site on Siteground

  • Resolved netnothing

    (@netnothing)


    1 year, 6 months ago

    Something seems to have happened at Siteground where I’m no longer able to restore a site from a Duplicator backup.

    I have a backup using the .daf for the archive. When I upload and run the installer.php I quickly get to a 400 – Bad Request page with the url being:

    https://site/dup-installer/main.installer.php

    The log seems fine:

    [May 24 15:32:21] 
[May 24 15:32:21] ==DUPLICATOR INSTALLER BOOTSTRAP v1.5.2.1==
[May 24 15:32:21] ----------------------------------------------------
[May 24 15:32:21] Installer bootstrap start
[May 24 15:32:21] Manual extract found so not going to extract dup-installer dir
[May 24 15:32:21] EXTRACT dup-installer dir
[May 24 15:32:21] NOTICE: Didn't need to extract the installer.
[May 24 15:32:21] Set permissions of dup-installer<br/>
[May 24 15:32:21] Set permissions of dup-installer/addons<br/>
[May 24 15:32:21] Set permissions of dup-installer/assets<br/>
[May 24 15:32:21] Set permissions of dup-installer/classes<br/>
[May 24 15:32:21] Set permissions of dup-installer/ctrls<br/>
[May 24 15:32:21] Set permissions of dup-installer/favicon<br/>
[May 24 15:32:21] Set permissions of dup-installer/libs<br/>
[May 24 15:32:21] Set permissions of dup-installer/original_files_[HASH]<br/>
[May 24 15:32:21] Set permissions of dup-installer/src<br/>
[May 24 15:32:21] Set permissions of dup-installer/templates<br/>
[May 24 15:32:21] Set permissions of dup-installer/vendor<br/>
[May 24 15:32:21] Set permissions of dup-installer/dup-archive__[HASH].txt<br/>
[May 24 15:32:21] Set permissions of dup-installer/dup-installer-csrf__[HASH].txt<br/>
[May 24 15:32:21] Set permissions of dup-installer/dup-scan__[HASH].json<br/>
[May 24 15:32:21] Set permissions of dup-installer/dup-scanned-dirs__[HASH].txt<br/>
[May 24 15:32:21] Set permissions of dup-installer/dup-scanned-files__[HASH].txt<br/>
[May 24 15:32:21] Set permissions of dup-installer/index.php<br/>
[May 24 15:32:21] Set permissions of dup-installer/main.installer.php<br/>
[May 24 15:32:21] DONE: No detected errors so redirecting to the main installer. Main Installer URI = https://site/dup-installer/main.installer.php

    I have tried rolling back PHP to 7.3.x instead of the 7.4.x.

    I have tried on a different Siteground account with the same results.

    Does anyone know if something changed at Siteground where these are being allowed to be installed anymore?

Viewing 10 replies - 1 through 10 (of 10 total)
  • Thread Starter netnothing

    (@netnothing)

    I am having Siteground support look, but so far they aren’t finding any changes that would cause this.

    I took the same installer package over to Hostgator and it works as expected.

    I also used this same installer package last week in my Siteground account and it worked fine.

    Thread Starter netnothing

    (@netnothing)

    Advanced support saying it was being blocked by a rule in mod_security. They have disabled it and the installer works.

    Trying to get more info, as I don’t think mod_security is configurable by clients.

    Thread Starter netnothing

    (@netnothing)

    This has been passed off to the Siteground Security Team for review.

    If anyone on here uses Siteground, for the time being you will have to contact support to have them disable the rule in mod_security that is blocking Duplicator from running if you are trying to do a restore.

    Thread Starter netnothing

    (@netnothing)

    I received this from Siteground support. Can the devs explain what the malicious attacks are for the Duplicator plugin?

    This is just an update to let you know that we received an update from our senior colleagues – it would appear that there is an ongoing malicious attack that targets the Duplicator plugin. This is why we needed to strengthen some of the firewall rules. In case you have an issue with a particular domain/site on our servers please get in touch and we will adjust it just for the domain/site in use.

    Plugin Support mohammedeisa

    (@mohammedeisa)

    @netnothing Thanks for reaching out and for your findings.

    Duplicator Pro doesn’t contain any malicious code. We have received a similar report and our security team is working on this.

    Please make sure that you have the latest Duplicator version installed on your website.

    Thanks!

    Thread Starter netnothing

    (@netnothing)

    @mohammedeisa Thank you for the reply. I am hoping your security team can contact Siteground so they can adjust their rules. This will impact how we migrate dev to live sites at SG if they don’t open this back up to allow Duplicator to work again.

    Plugin Support mohammedeisa

    (@mohammedeisa)

    @netnothing Of course, we will do our best to sort this out.

    @netnothing @mohammedeisa This error occurs because Siteground for some strange reason does not allow the following file:

    main.installer.php

    (I guess because of the point between main and installer)

    The solution once the ‘dump-installer’ folder is unzipped, is:

    • 1. Inside ‘installer.php’ rename any line of code that calls ‘main.installer’ to main_installer
    • 2. Within dup-installer, rename the file main.installer.php to main_installer.php
    • 3. inside dup-installer -> assets -> inc.js.php, rename any lines of code that call ‘main.installer’ to main_installer
    • 4. Within dup-installer locate the dup-scan_xxxxxxx.json file and rename any lines called from main.installer to main_installer
    • 5. Run again tudomini.com/installer.php

      I hope the duplicator support takes it into account, regards.
    Plugin Support mohammedeisa

    (@mohammedeisa)

    @albertodezv1 Thanks for sharing this solution, I will notify the team about it.

    Plugin Support mohammedeisa

    (@mohammedeisa)

    Hi @netnothing ,

    I’m closing this ticket for inactivity. Please don’t hesitate to contact us in a new ticket if you need any help with Duplicator.

    Thanks! 

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Not able to restore site on Siteground’ is closed to new replies.