skowronek

I ended up realizing on one dev box we had been running PHP 5.x, which I’m not sure that’s an issue specifically, but could cause serialization issues. I haven’t been able to reproduce since, but I will follow up later if it happens again, even with running PHP 7.x.

Thanks.

Did some more digging, looks like normal update to the plugin.

https://wpvulndb.com/plugins/w3-total-cache

https://www.wordfence.com/blog/2017/05/22-abandoned-wordpress-plugins-vulnerabilities/

Yes. You should. Looking into some posts saying vendor has been compromised.

I’ve been running into this same issue attempting to run the upgrade scripts and have it narrowed down to the rewrite_rules add_option attempt.

rewrite.php ~line 856
update_option(‘rewrite_rules’, $this->rules, true);

In the update_option function, line 109
add_option( $option_name, $newvalue, ”, ‘yes’, 1);

Just sits there and hangs on the following query:
INSERT INTO wp_options (option_name, option_value, autoload) VALUES (‘rewrite_rules’, ‘a:63:{s:11:\”robots.txt$\”;s:18:\”index.php?robots=1\”;s:15:\”.*/wp-atom.php$\”;s:19:\”index.php?feed=atom\”;s:14:\”.*/wp-rdf.php$\”;s:18:\”index.php?feed=rdf\”;s:14:\”.*/wp-rss.php$\”;s:18:\”index.php?feed=rss\”;s:15:\”.*/wp-rss2.php$\”;s:19:\”index.php?feed=rss2\”;s:15:\”.*/wp-feed.php$\”;s:19:\”index.php?feed=feed\”;s:23:\”.*/wp-commentsrss2.php$\”;s:34:\”index.php?feed=rss2&withcomments=1\”;s:32:\”feed/(feed|rdf|rss|rss2|atom)/?$\”;s:27:\”index.php?&feed=$matches[1]\”;s:27:\”(feed|rdf|rss|rss2|atom)/?$\”;s:27:\”index.php?&feed=$matches[1]\”;s:20:\”page/?([0-9]{1,})/?$\”;s:28:\”index.php?&paged=$matches[1]\”;s:41:\”comments/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:42:\”index.php?&feed=$matches[1]&withcomments=1\”;s:36:\”comments/(feed|rdf|rss|rss2|atom)/?$\”;s:42:\”index.php?&feed=$matches[1]&withcomments=1\”;s:29:\”comments/page/?([0-9]{1,})/?$\”;s:28:\”index.php?&paged=$matches[1]\”;s:44:\”search/(.+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:40:\”index.php?s=$matches[1]&feed=$matches[2]\”;s:39:\”search/(.+)/(feed|rdf|rss|rss2|atom)/?$\”;s:40:\”index.php?s=$matches[1]&feed=$matches[2]\”;s:32:\”search/(.+)/page/?([0-9]{1,})/?$\”;s:41:\”index.php?s=$matches[1]&paged=$matches[2]\”;s:14:\”search/(.+)/?$\”;s:23:\”index.php?s=$matches[1]\”;s:47:\”category/(.+?)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:52:\”index.php?category_name=$matches[1]&feed=$matches[2]\”;s:42:\”category/(.+?)/(feed|rdf|rss|rss2|atom)/?$\”;s:52:\”index.php?category_name=$matches[1]&feed=$matches[2]\”;s:35:\”category/(.+?)/page/?([0-9]{1,})/?$\”;s:53:\”index.php?category_name=$matches[1]&paged=$matches[2]\”;s:17:\”category/(.+?)/?$\”;s:35:\”index.php?category_name=$matches[1]\”;s:42:\”tag/(.+?)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:42:\”index.php?tag=$matches[1]&feed=$matches[2]\”;s:37:\”tag/(.+?)/(feed|rdf|rss|rss2|atom)/?$\”;s:42:\”index.php?tag=$matches[1]&feed=$matches[2]\”;s:30:\”tag/(.+?)/page/?([0-9]{1,})/?$\”;s:43:\”index.php?tag=$matches[1]&paged=$matches[2]\”;s:12:\”tag/(.+?)/?$\”;s:25:\”index.php?tag=$matches[1]\”;s:47:\”author/([^/]+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:50:\”index.php?author_name=$matches[1]&feed=$matches[2]\”;s:42:\”author/([^/]+)/(feed|rdf|rss|rss2|atom)/?$\”;s:50:\”index.php?author_name=$matches[1]&feed=$matches[2]\”;s:35:\”author/([^/]+)/page/?([0-9]{1,})/?$\”;s:51:\”index.php?author_name=$matches[1]&paged=$matches[2]\”;s:17:\”author/([^/]+)/?$\”;s:33:\”index.php?author_name=$matches[1]\”;s:69:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:80:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&feed=$matches[4]\”;s:64:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/(feed|rdf|rss|rss2|atom)/?$\”;s:80:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&feed=$matches[4]\”;s:57:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/page/?([0-9]{1,})/?$\”;s:81:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&paged=$matches[4]\”;s:39:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/?$\”;s:63:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]\”;s:56:\”([0-9]{4})/([0-9]{1,2})/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:64:\”index.php?year=$matches[1]&monthnum=$matches[2]&feed=$matches[3]\”;s:51:\”([0-9]{4})/([0-9]{1,2})/(feed|rdf|rss|rss2|atom)/?$\”;s:64:\”index.php?year=$matches[1]&monthnum=$matches[2]&feed=$matches[3]\”;s:44:\”([0-9]{4})/([0-9]{1,2})/page/?([0-9]{1,})/?$\”;s:65:\”index.php?year=$matches[1]&monthnum=$matches[2]&paged=$matches[3]\”;s:26:\”([0-9]{4})/([0-9]{1,2})/?$\”;s:47:\”index.php?year=$matches[1]&monthnum=$matches[2]\”;s:43:\”([0-9]{4})/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:43:\”index.php?year=$matches[1]&feed=$matches[2]\”;s:38:\”([0-9]{4})/(feed|rdf|rss|rss2|atom)/?$\”;s:43:\”index.php?year=$matches[1]&feed=$matches[2]\”;s:31:\”([0-9]{4})/page/?([0-9]{1,})/?$\”;s:44:\”index.php?year=$matches[1]&paged=$matches[2]\”;s:13:\”([0-9]{4})/?$\”;s:26:\”index.php?year=$matches[1]\”;s:58:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/attachment/([^/]+)/?$\”;s:32:\”index.php?attachment=$matches[1]\”;s:68:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/attachment/([^/]+)/trackback/?$\”;s:37:\”index.php?attachment=$matches[1]&tb=1\”;s:88:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/attachment/([^/]+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:83:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/attachment/([^/]+)/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:57:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/([^/]+)/trackback/?$\”;s:85:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&name=$matches[4]&tb=1\”;s:77:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/([^/]+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:97:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&name=$matches[4]&feed=$matches[5]\”;s:72:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/([^/]+)/(feed|rdf|rss|rss2|atom)/?$\”;s:97:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&name=$matches[4]&feed=$matches[5]\”;s:65:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/([^/]+)/page/?([0-9]{1,})/?$\”;s:98:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&name=$matches[4]&paged=$matches[5]\”;s:57:\”([0-9]{4})/([0-9]{1,2})/([0-9]{1,2})/([^/]+)(/[0-9]+)?/?$\”;s:97:\”index.php?year=$matches[1]&monthnum=$matches[2]&day=$matches[3]&name=$matches[4]&page=$matches[5]\”;s:47:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/([^/]+)/?$\”;s:32:\”index.php?attachment=$matches[1]\”;s:57:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/([^/]+)/trackback/?$\”;s:37:\”index.php?attachment=$matches[1]&tb=1\”;s:77:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/([^/]+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:72:\”[0-9]{4}/[0-9]{1,2}/[0-9]{1,2}/[^/]+/([^/]+)/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:25:\”.+?/attachment/([^/]+)/?$\”;s:32:\”index.php?attachment=$matches[1]\”;s:35:\”.+?/attachment/([^/]+)/trackback/?$\”;s:37:\”index.php?attachment=$matches[1]&tb=1\”;s:55:\”.+?/attachment/([^/]+)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:50:\”.+?/attachment/([^/]+)/(feed|rdf|rss|rss2|atom)/?$\”;s:49:\”index.php?attachment=$matches[1]&feed=$matches[2]\”;s:18:\”(.+?)/trackback/?$\”;s:35:\”index.php?pagename=$matches[1]&tb=1\”;s:38:\”(.+?)/feed/(feed|rdf|rss|rss2|atom)/?$\”;s:47:\”index.php?pagename=$matches[1]&feed=$matches[2]\”;s:33:\”(.+?)/(feed|rdf|rss|rss2|atom)/?$\”;s:47:\”index.php?pagename=$matches[1]&feed=$matches[2]\”;s:26:\”(.+?)/page/?([0-9]{1,})/?$\”;s:48:\”index.php?pagename=$matches[1]&paged=$matches[2]\”;s:18:\”(.+?)(/[0-9]+)?/?$\”;s:47:\”index.php?pagename=$matches[1]&page=$matches[2]\”;}’, ‘yes’)

Unless I’m missing something, the VALUES section of a SQL insert statement doesn not have 2 parameters, unless this is something new to MySQL.