RChadwick

It helps. It’s on my to-do list today to look into those custom codes. Will they survive an update?

Thanks. Here it is:

Versions:
WordPress: 5.5.3
WordPress MS: No
PHP: 7.4.12
WP Mail SMTP: 2.5.1

Params:
Mailer: smtp
Constants: No
ErrorInfo: SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting
Host: mail.primeroselane.org
Port: 465
SMTPSecure: ssl
SMTPAutoTLS: bool(false)
SMTPAuth: bool(true)

Server:
OpenSSL: OpenSSL 1.1.1d 10 Sep 2019
Apache.mod_security: No

Debug:
Mailer: Other SMTP
SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting

SMTP Debug:
2020-11-20 05:10:36 Connection: opening to ssl://mail.primeroselane.org:465, timeout=300, options=array()

2020-11-20 05:10:36 Connection failed. Error #2: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed [/home/gilesmkeo/public_html/primeroselane.org/wordpress/wp-includes/PHPMailer/SMTP.php line 344]

2020-11-20 05:10:36 Connection failed. Error #2: stream_socket_client(): Failed to enable crypto [/home/gilesmkeo/public_html/primeroselane.org/wordpress/wp-includes/PHPMailer/SMTP.php line 344]

2020-11-20 05:10:36 Connection failed. Error #2: stream_socket_client(): unable to connect to ssl://mail.primeroselane.org:465 (Unknown error) [/home/gilesmkeo/public_html/primroselane.org/wordpress/wp-includes/PHPMailer/SMTP.php line 344]

2020-11-20 05:10:36 SMTP ERROR: Failed to connect to server: (0)

SMTP connect() failed. https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting

Well, does anyone know of an ‘autopatcher’ utility? Perhaps something that runs in Windows, grabs the PHP file by FTP, modifies it, and uploads it back?

I haven’t figured out how to get the lost password link to actually email users their passwords.

Thanks for your response Paul.

From what I know of Wordfence, it scans for changes in files, as well as comparing files to what they’re supposed to look like, as well as scanning for known infections. This is a lot like having a burglar alarm, which, while very useful, cannot replace a locked door.

While I can edit .htaccess files manually, I’d rather start with a program that does it. I manage about 5 websites in my spare time, and managing all .htaccess files manually means I’m almost guaranteed to miss something, especially since I’m not a security expert, nor will I ever be one. If Bulletproof security hoses the .htaccess, I simply delete and recreate it. For me, I think it’s better having a program manage the .htaccess. I can still edit manually if needed. I still think Bulletproof will do a better job than me.

There’s also lots of little things that need to be done, such as file permissions, database prefix, bruteforce protection etc. Again, many of these things can be done manually, but I have better things to do, especially if I have to recreate things from near scratch when moving/updating/recovering the webserver. I’d like to find a program that does ALL these things, but it doesn’t look like it exists. Plan B is to find the best combination of plugins. Wordfence and Bulletproof seem like a good pair, as there is little if any overlap. Now I’m looking for the third, or perhaps fourth piece.

I’m not trying to disparage WPSF. In all the research I’ve done, I’ve narrowed the best of the best plugins down to 4, and WPSF is in there. I just don’t think it’s a complete solution. At least, not for me.

How would you say WPSF compares to AIO?

Thanks for the response Ron!
Well, I’m running everything now on a previously-hacked-and-unstable-and-probably-still-has-trojans-somewhere Windows VM. I’m migrating everything to Turnkey Linux. I really like the idea of having to only worry about updating one installation, and one set of plugins (That’s how I got hacked last time.. An OLD, ignored plugin), and figured this would be the best time ever to do Multisite. On paper, to me it’s a no-brainer. I’m just worried I might be opening myself to a bunch of unforeseen problems, quirks, and incompatibilities.

I was afraid of that… I appreciate your effort. I haven’t been able to find another MP3 plugin like this one. I guess I’ll have to keep looking for one. Thanks again for your help!

I have the same problem. I don’t have any posts, but I attached the files to a page, with no luck.

I think my brain took a little vacation, and missed doing that obvious step ??
I disabled the MP3 plugin, enabled WP-Piwik, and the page loads fine, so I guess that’s the conflict. Any idea how we can make the two plugins play nice?

Thanks for the response Braeking.

No SSL certificate installed. Not using SSL.

I checked the trusted hostname for the Piwik server, and it is correct.

I’ve compared the Piwik configurations for both websites very carefully, and can’t find a significant difference. The non-working website is actually a bit simpler, with fewer pages, plugins, and viewers. The only thing the non-working site has that the working site doesn’t, is that n3rdskwat-mp3player plugin. Since it uses Java, Ajax, or some other magic to put an MP3 player at the bottom of the page, and not interrupt the playing while going to other pages, I thought there might be something there that’s interfering. I’m probably wrong.

Any other ideas?

Thanks!

Anyone? After more research, all I could find is that someone had possibly the same problem, but was using a template without custom menus. As far as I can tell, Koi can use custom menus. Or am I wrong?