Topic: 404 error

[ajanini]

   1.  WordPress Version: 2.8.4
   2. Theme Name: Rufai (custom theme)
   3. Blog URL: http://www.asterisko.com.br/
   4. Problem Plugin Name And Version: WP-UserOnline 2.50
   5. PHP Version: 5.2.10
   6. MYSQL Version: 4.1.22-standard

Hi Lester,

I am getting a 404 error quite often (checking my server stats, over 9k last month, and 12k this month!). The error refers to http://www.asterisko.com.br/wp-content/plugins/wp-useronline/wp-useronline.php, but I know that file is there.

So, looking into it further I found that on my UserOnline page (http://www.asterisko.com.br/estatisticas/useronline/) quite often there's a Guest ("Convidado") online and he seems to be at the 404 page. The page he seems to be viewing is always something like below:

http://www.asterisko.com.br/wp-content/plugins/wp-useronline/wp-useronline.php?_=1250594106459&useronline_mode=useronline_count

or

http://www.asterisko.com.br/wp-content/plugins/wp-useronline/wp-useronline.php?_=1250593506631&useronline_mode=useronline_browsingpage

The number seems to be random, and the parameters beeing passed look like they could mean something to the plugin, but I'm not sure. Anyway, I couldn't find anywhere else on my site where the above URLs could have been generated, except on the UserOnline page showing the Guest is visiting the 404 page.

The referrer matches the referrer in my CPanel's 404 log, and it seems to be from http://www.asterisko.com.br/vista-speedy-e-mtu/ this month. Last month, it was from the home page.

Could this be some sort of attack, or exploit attempt? Is there anything I can do to fix it?

I'd really appreciate some help here! Thanks!

[GaMerZ]

That is the AJAX request to update the useronline count. Check your permission for /wp-content/ Ensure that folders are chmod to 755 and files are 644. http://www.asterisko.com.br/wp-content/plugins/wp-useronline/wp-useronline.php?_=1250593506631&useronline_mode=useronline_browsingpage should return a blank page.

[ajanini]

I double checked file permissions and they are as you said, 755 for folders and 644 for files.
Still getting 404 when trying to access http://www.asterisko.com.br/wp-content/plugins/wp-useronline/wp-useronline.php?_=1250595906506&useronline_mode=useronline_count

Any more ideas?

[GaMerZ]

I am sure it is your permission issue based on my experience and from the posts in the forum. Double and triple check every folders and files in /wp-content/

[ajanini]

Yeah, that's not it... All files are 644 (or higher) and all folders, 755 (or higher).
Could it be anything else?

[GaMerZ]

You got some extra .htaccess blocking the AJAX request somewhere in your folders? I can't think of anything else already.

[ajanini]

Here's my .htaccess (attached - I saved it as .txt). I don't know a lot about it, but I don't think that's the problem. It's in the root folder where WP is installed.

[attachment deleted by admin]

[GaMerZ]

wow lots of stuff, it maybe the problem, try creating a new .htaccess and just put in:

Code: [Select]

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

[ajanini]

Well, I give up. That did not work either... Still getting 404 error.