Solved

Wordpress-XAMPP throws Apache Error 6054

Posted on 2013-01-14
1
714 Views
Last Modified: 2013-01-15
I have a SuSe Linux Enterprise Server (SLES10)-based Wordpress server that we downloaded the XAMPP package, installed and have had running successfully for several months.  It includes Apache, MySQL, MyPhpAdmin and Wordpress all in one package.

We built a district site with four school sites below it on the same server.  Sunday morning (of course) a call came that the district site was down.  A restart of the server yielded nothing.  A restart of LAMPP yielded nothing.  Here is the exact error:

Apache Error: 6054 Invalid Memory Log has taken over homepage for security,

While the LAMPP (./lampp restart) starts/restarts fine, the opening or top page of the site still reports the error.  And, there is nothing we can find on the codex.wordpress site or anywhere else on Google.

I found an access_log file that was 1.3 gb in size and zeroed it out with a script and restarted...no luck.

We've had no trouble with this server (no new patches have been added).  Wordpress has run flawlessly for months.

Any thoughts...this has become a very visible problem.

Thanks,
Scott
0
Comment
Question by:ZENandEmailguy
1 Comment
 
LVL 18

Accepted Solution

by:
ZENandEmailguy earned 0 total points
ID: 38775486
We resolved the issue...the server had been hacked and somehow an index.php file uploaded into the htdocs/ that had the words in the error coded into it.

Using top I found six perl daemons running and killed all six and the performance of the server increased dramatically. I then found a file called wp.php that had been uploaded in the htdocs/ directory and it was executing a variety of things. I've captured it, renamed it and moved it off of the server so I can study it and see if I can figure out what it was doing.

The /var/log/messages was logging an ftp open and close every second and the Internet Provider was able to capture a trace (and shutdown outgoing) showing thousands of packets going to an IP address coming (they said) from Mississippi of all places.

Sorry ask for help on an error that wasn't an error after all...it was a hack. If I knew who it was, I'd suggest they be strung up by their thumbs.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
You ever wonder how to backup Linux system files just like Windows System Restore?  Well you can use Timeshift in Linux to perform those similar action.  This tutorial will show you how to backup your system files and keep regular intervals. Note…
The purpose of this video is to demonstrate how to Import and export files in WordPress. This will be demonstrated using a Windows 8 PC. Go to your WordPress login page. This will look like the following: mywebsite.com/wp-login.php : Click on Too…
The purpose of this video is to demonstrate how to integrate Mailchimp with WordPress, by placing a Mailchimp signup form on a WordPress Page or Post. This will be demonstrated using a Windows 8 PC. Mailchimp will be used. Log into your Mailchi…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question