?
Solved

Wordpress-XAMPP throws Apache Error 6054

Posted on 2013-01-14
1
Medium Priority
?
749 Views
Last Modified: 2013-01-15
I have a SuSe Linux Enterprise Server (SLES10)-based Wordpress server that we downloaded the XAMPP package, installed and have had running successfully for several months.  It includes Apache, MySQL, MyPhpAdmin and Wordpress all in one package.

We built a district site with four school sites below it on the same server.  Sunday morning (of course) a call came that the district site was down.  A restart of the server yielded nothing.  A restart of LAMPP yielded nothing.  Here is the exact error:

Apache Error: 6054 Invalid Memory Log has taken over homepage for security,

While the LAMPP (./lampp restart) starts/restarts fine, the opening or top page of the site still reports the error.  And, there is nothing we can find on the codex.wordpress site or anywhere else on Google.

I found an access_log file that was 1.3 gb in size and zeroed it out with a script and restarted...no luck.

We've had no trouble with this server (no new patches have been added).  Wordpress has run flawlessly for months.

Any thoughts...this has become a very visible problem.

Thanks,
Scott
0
Comment
Question by:ZENandEmailguy
1 Comment
 
LVL 18

Accepted Solution

by:
ZENandEmailguy earned 0 total points
ID: 38775486
We resolved the issue...the server had been hacked and somehow an index.php file uploaded into the htdocs/ that had the words in the error coded into it.

Using top I found six perl daemons running and killed all six and the performance of the server increased dramatically. I then found a file called wp.php that had been uploaded in the htdocs/ directory and it was executing a variety of things. I've captured it, renamed it and moved it off of the server so I can study it and see if I can figure out what it was doing.

The /var/log/messages was logging an ftp open and close every second and the Internet Provider was able to capture a trace (and shutdown outgoing) showing thousands of packets going to an IP address coming (they said) from Mississippi of all places.

Sorry ask for help on an error that wasn't an error after all...it was a hack. If I knew who it was, I'd suggest they be strung up by their thumbs.
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

1. Introduction As many people are interested in Linux but not as many are interested or knowledgeable (enough) to install Linux on their system, here is a safe way to try out Linux on your existing (Windows) system. The idea is that you insta…
So you have coded your own WordPress plugin and now you want to allow users to upload images to a folder in the plugin folder rather than the default media location? Follow along and this article will show you how to do just that!
This video teaches users how to migrate an existing Wordpress website to a new domain.
The purpose of this video is to demonstrate how to prevent comment spam on a WordPress Website. This will be demonstrated using a Windows 8 PC. Plugin Akismet will be used. Go to your WordPress login page. This will look like the following: myw…
Suggested Courses
Course of the Month4 days, 6 hours left to enroll

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question