Solved

Wordpress-XAMPP throws Apache Error 6054

Posted on 2013-01-14
1
721 Views
Last Modified: 2013-01-15
I have a SuSe Linux Enterprise Server (SLES10)-based Wordpress server that we downloaded the XAMPP package, installed and have had running successfully for several months.  It includes Apache, MySQL, MyPhpAdmin and Wordpress all in one package.

We built a district site with four school sites below it on the same server.  Sunday morning (of course) a call came that the district site was down.  A restart of the server yielded nothing.  A restart of LAMPP yielded nothing.  Here is the exact error:

Apache Error: 6054 Invalid Memory Log has taken over homepage for security,

While the LAMPP (./lampp restart) starts/restarts fine, the opening or top page of the site still reports the error.  And, there is nothing we can find on the codex.wordpress site or anywhere else on Google.

I found an access_log file that was 1.3 gb in size and zeroed it out with a script and restarted...no luck.

We've had no trouble with this server (no new patches have been added).  Wordpress has run flawlessly for months.

Any thoughts...this has become a very visible problem.

Thanks,
Scott
0
Comment
Question by:ZENandEmailguy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 18

Accepted Solution

by:
ZENandEmailguy earned 0 total points
ID: 38775486
We resolved the issue...the server had been hacked and somehow an index.php file uploaded into the htdocs/ that had the words in the error coded into it.

Using top I found six perl daemons running and killed all six and the performance of the server increased dramatically. I then found a file called wp.php that had been uploaded in the htdocs/ directory and it was executing a variety of things. I've captured it, renamed it and moved it off of the server so I can study it and see if I can figure out what it was doing.

The /var/log/messages was logging an ftp open and close every second and the Internet Provider was able to capture a trace (and shutdown outgoing) showing thousands of packets going to an IP address coming (they said) from Mississippi of all places.

Sorry ask for help on an error that wasn't an error after all...it was a hack. If I knew who it was, I'd suggest they be strung up by their thumbs.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You ever wonder how to backup Linux system files just like Windows System Restore?  Well you can use Timeshift in Linux to perform those similar action.  This tutorial will show you how to backup your system files and keep regular intervals. Note…
1. Introduction As many people are interested in Linux but not as many are interested or knowledgeable (enough) to install Linux on their system, here is a safe way to try out Linux on your existing (Windows) system. The idea is that you insta…
This video teaches viewers how to create their own website using cPanel and Wordpress. Tutorial walks users through how to set up their own domain name from tools like Domain Registrar, Hosting Account, and Wordpress. More specifically, the order in…
The purpose of this video is to demonstrate how to set up an RSS Feed on a WordPress Website. This will be demonstrated using a Windows 8 PC. Feedburner will be used for this demonstration. Go to your WordPress login page. This will look like the…

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question