algisj

Thanks Herman, Cheers !

Thank you for the reply.

I thought it wasn’t a real issue, but better check with a knowledgeable person. I will get the release when it is available.
I’ll close the issue and reopen another one if I face more/other issue/quesion.
Cheers !

Algis

Case closed – I found it – Call me Dumb ??

• This reply was modified 10 months ago by algisj.

Thank you.

I understand. Sorry for the post in the wrong sub-forum. I will investigate following your directives and will bump in the right forum if I do not succeed.
Most certainly not the hosting, they barely know what are backups according to my experience .

Cheers !

Algis

Thank you for the reply. I might be confused and/or I have badly expressed myself.

I installed the WordPress App on my mobile. I then want to connect with this App to the website which is working fine as I can tell and the message on that mobile APP is
“Couldn’t connect. Required XML-RPC methods are missing on the server.”

https://tinyurl.com/uamfa285

Thus my question. I am not a WP expert, I just manage the Lady’s site and want to let her able to create posts from her mobile.

Algis

• This reply was modified 10 months ago by algisj.
• This reply was modified 10 months ago by algisj.

Thank you. I re-uploaded the plugin from the host’s file manager instead of my local FileZilla. I do not know if that fixed the messages but it did…

I close the tread, no much more to say.

Make sure you have a backup !!! Better to have a backup faulty than no backup. If you cannot access wp-admin try your hosting CPanel or similar. Or use FTP.
Disable all plugin by moving them in a backup directory?
Check .htaccess for malicious injections?
Try delete and replacing the WP Core? (not the wp-contents)

Sure cannot compare with your problem but I was plagued by a malware/virus/hack (dunno what) and it start by modifying all the .htaccess with a “deny all” statement for all php calls… A real pain.

Hope this might help.

• This reply was modified 10 months, 1 week ago by algisj.

Thank you. I will read it thoroughly. Meanwhile I have installed a suite of free plugins (ninja antivirus and firewall) that seems to offer scan and protection.

Bingo ! 3 sites out of 4 were restored with no loss !

They really were infected like the hell.

The way I made it works has finally been by :
Restoring the core with a downloaded version that I stored locally.
Deleted wp-admin and wp-includes on the site.
FTP’d those 2 directories to the site.
FTP’d core files in site root (wp-config is not in the downloaded fresh copy.
From now on, site load and wp-admin works
In the Dashboard, re-save the permalinks.
And Voilà !

## Remain Backuply that is not working. I will save all the backups in another directory and delete/re-install it.

It took so long because I tried to understand what happened and :
Found many files corruped by obfuscated code in many .php files.
Found php.ini with code that modify php security and behavior
Sparse “anygibberish.php” in few directories (gibberish always 10 characters long as filename and php as extension, like srwixqrjss.php).
Other anomalies like libraries to compile encrypted scripts in a directory named “sodium-compat”.

It was way to much to clean so I decided to clean only the wp-contents directory and then re-install a fresh core after having FTP’d to my PC for safety (one of the site have posts back to 2014 so darn long FTPs ?? )

That’s it. Thanks @moeo and @muddassirnasim for their help and suggestions. I will mark the post as “resolved”.

Cheers !

@moeo : Thanks, I am almost there… It seems to load all the posts, pages, plugins etc… I am currently testing them (Plugins) but I’ll go sleep (0100 Monday here) so I will finish tomorrow.

The key so far has been the .htaccess files – I know – basic but there are literally hundreds of them ?? – I assumed (wrongly – never assume) that WP would modify handlers so that .htaccess were recursive… Mea culpa

I already know :
backuply is not working; it hangs at 65% forever…
Softaculous WP Toolkit hang also – seems forever since no %ge nor progress is shown.

ZZzzzzzzzzzzzzz

Thanks BBL

Thanks for your reply.

@moe : your suggestion is interesting but there are no directories in there that would suggest that virus. It might have existed though. But your suggestion gave me some idea (like deleting all .htaccess and see if it works – if I can access permalinks in setting it should write them back(?))

@muddassirnasim : Do you use ChatGPT or your answers? I do too but so far it did not help much. Thanks anyway for all suggestions.

Be back later, this might take a while.

Cheers and wish me good luck ??