Savvy Sleuth

Thank you for the help!

Thanks… will do.

Is the Unrecognized file in WordPress core directory: wp-admin/.htaccess found by Wordfence.

Just installed Wordfence security plugin after noting plugins were installed that I had not installed.

Found this:

Wordfence found the following new issues on “Savvy Sleuth”.

Alert generated at Monday 24th of September 2012 at 12:42:20 PM
Critical Problems:

* This file may contain malicious executable code

Warnings:

* Unrecognized file in WordPress core directory: wp-admin/.htaccess
* Unrecognized file in WordPress core directory: wp-admin/error_log

Now how to fix it… and protect from more?

I have changed the WP admin password, but i’m sure there’s much more to do.

(Should I start anther thread and close this one as resolved? The widgets work!)

Was just told by Bluehost it’s a theme update issue. I have the most up to date Magazine Flow theme, and if I change themes the issues still exist. A huge number of 403 errors including:

403 Permission Denied: You do not have permission for this request /wp-admin/plugins.php?action=delete-selected&checked%5B0%5D=hello.php&plugin_status=all&paged=1&s&_wpnonce=a8661b2393

when I tried to delete Magazine Flow with the intention to re-install it.

Also trying to uninstall plugins that I didn’t install… they just showed up and getting:

403 Permission Denied

You do not have permission for this request /wp-admin/plugins.php?action=delete-selected&checked%5B0%5D=hello.php&plugin_status=all&paged=1&s&_wpnonce=a8661b2393

Could this be a ‘hack’ issue? If so… how would I figure that out and fix it?

Thank you Chris… the widget issue is fixed. Unfortunately I have a few more now.

I did get a response from Bluehost support (bumped me up a level) and they said:

Hello,
I apologize for any troubles you’ve been having.

Added this line to your wp-config.php file
define(‘CONCATENATE_SCRIPTS’, false);

and it seems to have fixed/resolved the issue.

Let us know if there is anything further i can assist you with.

My response:

Hi,

First, thank you for your help. More issues… wondering if there’s a conflict between WordPress versions … read on.

I had trouble logging into WP, but changed the password and got in.

Current issues:
1. Attempting to delete spam – get this error.
403 Permission Denied

You do not have permission for this request /wp-admin/edit-comments.php?s=&comment_status=spam&pagegen_timestamp=2012-09-24+17%3A52%3A00&_total=14&_per_page=20&_page=1&_ajax_fetch_list_nonce=a67ec4e417&_wp_http_referer=%2Fwp-admin%2Fedit-comments.php%3Fcomment_status%3Dspam&_wpnonce=e1b3b8d113&_wp_http_referer=%2Fwp-admin%2Fedit-comments.php%3Fcomment_status%3Dspam&action=delete&comment_type=&_destroy_nonce=218a0add00&_wp_http_referer=%2Fwp-admin%2Fedit-comments.php%3Fcomment_status%3Dspam&paged=1&delete_comments%5B%5D=824&delete_comments%5B%5D=823&delete_comments%5B%5D=822&delete_comments%5B%5D=821&delete_comments%5B%5D=820&delete_comments%5B%5D=819&delete_comments%5B%5D=818&delete_comments%5B%5D=817&delete_comments%5B%5D=816&delete_comments%5B%5D=815&delete_comments%5B%5D=814&delete_comments%5B%5D=813&delete_comments%5B%5D=812&delete_comments%5B%5D=798&action2=-1&_destroy_nonce=218a0add00&_wp_http_referer=%2Fwp-admin%2Fedit-comments.php%3Fcomment_status%3Dspam

2. Very common to get these 403 errors with any similar action INCLUDING when attempting to reinstall WordPress through WP dashboard which gives me this error:
403 Permission Denied

You do not have permission for this request /wp-admin/about.php?updated

and I also get ‘Permission Denied’ when attempting to resolve upgrade issue on Bluehost (see screenshot).

Note: WP dashboard shows WP 3.4.2 as installed, but Bluehost Cpanel tells me to upgrade and states site is using 3.2.1 . (Screenshot attached.)

3. Wrote and posted yesterday, but the post doesn’t appear on the site.

4. Went to the page this morning and saw the WP Dashboard toolbar on the site. Clicked it and was taken to WP-Admin, but couldn’t log in. Changed password and got in, but still seeing the Dashboard toolbar even when logged out of Dashboard.

In Chrome I see the Dashboard – and the new post when the https://www.savvysleuth.com loads. In IE and Firefox I see no Dashboard, but I don’t see a new post.

5. In Posts – Quick Edit – Update – get all the text into one skinny line on left within Dashboard. (See screenshot). A first!

THE GOOD NEWS… the widgets seem to be working.

6. Attempted to update Menu and received this for the first time…

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Notice: Undefined index: bavotasan_nonce in /home3/savvysle/public_html/wp-content/themes/magazine-flow/functions.php on line 1673

Admittedly, what was ugly before seems uglier now, but I feel hopeful that resolution is on the horizon – which is more than I felt yesterday.

I am curious why WP is showing one version in the WP Dashboard and one on Bluehost and why permissions are being denied. It seems like a conflict that once resolved will allow server and WP to play nice once again.

Again, thank you for any and all help. It all adds to my knowledge base and lets me freak out a little bit less each time these things occur.

You do not have permission for this request /wp-admin/load-scripts.php?c=0&load=admin-bar,hoverIntent,common,jquery-color,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-draggable,jquery-ui-droppable,admin-widgets&ver=3.4.2

is the element for the widget page.

Does that tell anyone anything?

Thanks.

reference to external entity in attribute value ?
This is generally the sign of an ampersand that was not properly escaped for inclusion in an attribute, in a href for example. You will need to escape all instances of ‘&’ into ‘&’.

Line 206, column 114: reference to external entity in attribute value

I see a lot of these. I would go to line 206 (in this instance) and replace ALL “&” with”&” – no quotations around it – to repair that error.

Is that correct?

document type does not allow element X here; missing one of Y start-tag ?
The mentioned element is not allowed to appear in the context in which you’ve placed it; the other mentioned elements are the only ones that are both allowed there and can contain the element mentioned. This might mean that you need a containing element, or possibly that you’ve forgotten to close a previous element.

One possible cause for this message is that you have attempted to put a block-level element (such as “<p>” or “<table>”) inside an inline element (such as ““, “<span>”, or “<font>”).

Line 300, column 101: document type does not allow element “center” here; missing one of “object”, “applet”, “map”, “iframe”, “button”, “ins”, “del” start-tag
…> <div class=”textwidget”><p><center>

I note that with this error message there are red highlighted parts to indicate where the error is occurring. ‘widget’ appearing in the error gives me hope. Maybe I’ll just start there to see if I unlock the Widget Dashboard.

Thank you for the link.

I’ve passed it on to the server’s support staff in hopes of a helpful response. Unfortunately I have not a clue where to begin fixing errors as I’m ‘savvy’ finding deals, but not on fixing code or identifying errors.

I can see that most of these issues have to do with affiliate links – most of which I simply copy and paste.

Good to know, but not sure how to do anything with them to fix the Widget – no response issue.

Forgive my ignorance, but I appreciate the help.

I also tried posting to the blog via WP and it seemed to load, but when I checked it in another browser I noted it didn’t appear on the blog. Assuming it was a cache issue, I then added WP Super Cache plugin and was told “The pages do not match! Timestamps differ or were not found!” when I ran a test of website. I tried the ‘Advanced’ tab within that plugin and received: 403 Permission Denied – You do not have permission for this request /wp-admin/options-general.php?page=wpsupercache&tab=settings

wp-admin seems to be a sticking point. Is there a way to give it a fresh install from a downloaded version of the current WP files? Would this help?

Thanks!

Bluehost says the permissions are ‘fine’, and that this is not the issue.

Is there anything else I can do or offer to this forum to help diagnose an fix the problem?

Thank you Chris… I’ll give that a try. They said I had to come to WP as there was nothing else they could do. Of to rattle their cage now and crossing my fingers!

Timestamp: 9/23/2012 11:32:11 AM
Error: [Exception… “Component returned failure code: 0x80004002 (NS_NOINTERFACE) [nsISupports.QueryInterface]” nsresult: “0x80004002 (NS_NOINTERFACE)” location: “JS frame :: resource://personas/modules/service.js :: <TOP_LEVEL> :: line 1227” data: no]
Source File: resource://personas/modules/service.js
Line: 1227

was what I just got off the Error Console in Firefox. Should I include that info, or is it the same thing?

Just deactivated all the activated plug-ins and reactivated them one by one. Was able to get back the ability to tag posts within the main page and with Quick Edit. Tried adding images and prior to this that didn’t work either.

Noted that social media plugins were most problematic for me.

Same problem here. Upgraded to 3.4 today and now cannot add tags to posts.