[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Wordpress-XAMPP throws Apache Error 6054

Posted on 2013-01-14
1
Medium Priority
?
732 Views
Last Modified: 2013-01-15
I have a SuSe Linux Enterprise Server (SLES10)-based Wordpress server that we downloaded the XAMPP package, installed and have had running successfully for several months.  It includes Apache, MySQL, MyPhpAdmin and Wordpress all in one package.

We built a district site with four school sites below it on the same server.  Sunday morning (of course) a call came that the district site was down.  A restart of the server yielded nothing.  A restart of LAMPP yielded nothing.  Here is the exact error:

Apache Error: 6054 Invalid Memory Log has taken over homepage for security,

While the LAMPP (./lampp restart) starts/restarts fine, the opening or top page of the site still reports the error.  And, there is nothing we can find on the codex.wordpress site or anywhere else on Google.

I found an access_log file that was 1.3 gb in size and zeroed it out with a script and restarted...no luck.

We've had no trouble with this server (no new patches have been added).  Wordpress has run flawlessly for months.

Any thoughts...this has become a very visible problem.

Thanks,
Scott
0
Comment
Question by:ZENandEmailguy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 18

Accepted Solution

by:
ZENandEmailguy earned 0 total points
ID: 38775486
We resolved the issue...the server had been hacked and somehow an index.php file uploaded into the htdocs/ that had the words in the error coded into it.

Using top I found six perl daemons running and killed all six and the performance of the server increased dramatically. I then found a file called wp.php that had been uploaded in the htdocs/ directory and it was executing a variety of things. I've captured it, renamed it and moved it off of the server so I can study it and see if I can figure out what it was doing.

The /var/log/messages was logging an ftp open and close every second and the Internet Provider was able to capture a trace (and shutdown outgoing) showing thousands of packets going to an IP address coming (they said) from Mississippi of all places.

Sorry ask for help on an error that wasn't an error after all...it was a hack. If I knew who it was, I'd suggest they be strung up by their thumbs.
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you use Debian 6 Squeeze and you are tired of looking at the childish graphical GDM login screen that is used by default, here's an easy way to change it. If you've already tried to change it you've probably discovered that none of the old met…
The purpose of this article is to fix the unknown display problem in Linux Mint operating system. After installing the OS if you see Display monitor is not recognized then we can install "MESA" utilities to fix this problem or we can install additio…
The purpose of this video is to demonstrate how to set up an RSS Feed on a WordPress Website. This will be demonstrated using a Windows 8 PC. Feedburner will be used for this demonstration. Go to your WordPress login page. This will look like the…
The purpose of this video is to demonstrate how to set up the permalinks on a WordPress Website. This will be demonstrated using a Windows 8 PC. Go to your WordPress login page. This will look like the following: mywebsite.com/wp-login.php : Go t…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question