Fatal Error

This identical error has begun to turn up on our websites. So far on 6 sights. An equal number of our websites are on the same server and have not yet shown this error. As a precaution we have now deactivated on 4 of the working sites. All are running the same version of WP 3.9.1
When we first found this about 2 hours ago we removed WP-Statistics from the plugins directory (by FTP) and the site came back to life, however the guts of the system seem to be messed up. We are about to reinstall WP 3.9.1 to see if that clears things up.

Reinstalling WP3.9.1 did not resolve the back end issues on the site which is working but dashboard messed up. All plug ins seem to be working, but are not visible. That is to say we when we try to install them we are told that they are already installed. We will now delete them from the plugins folder and start installing again.

The code in the wp-statistics\vendor directory are all 3rd party libraries we use for the GeoIP, they’ve remained static over the last few releases so it seems very odd to get an error in them.

It sounds more like a PHP issue or something is corrupted/hacked. I know there’s a current hack out there for MailPoet (https://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.html), are you using it on any of your sites?

Yes
I’ve used the above mentioned plugin. When I was removed it, site has encountered no any problem.

It sounds like you may have an infection then and WP Statistics is just a victim of it.

Greg. We are just starting again on the west coast. We have had no more of our sites go down with this problem since we turned off WP-Statistics. We have now rebuilt a second site which has again involved removing all the plugins and reinstalling without WP-Statistics. We love WP-Statistics and had about 12 sites using it. of the 12, only 6 were impacted by this error. Of our 18 sites, the only ones were those with WP-Statistics AND GeoIP turned on. The 6 sites with WP-Statistics but GeoIP not turned on were fine. I agree that it must be an infection and that WP Statistics is the victim.
The only consistency seems to be the GeoIP. Of the 18 sites we have there are many different themes, two different servers and many different plugin combinations. All 18 sites are on WP 3.9.1
With respect to MailPoet, we do use it, but none of the sites that went down are those that use it so it is innocent.
We will repair the other 4 sites this morning and keep fingers crossed, but are reluctant to turn WP-Statistics back on (except perhaps on one site as an experiment).

The infection can spread between sites hosted on the same account, so MailPoet doesn’t actually need to be installed or used on the effected site.

Clearly the infection is looking for the library that is being used by the GeoIP code and infecting the files in it.

From the linked article above:

All the hacked sites were either using
MailPoet or had it installed on another
sites within the same shared account
(cross-contamination still matters).

Apparently it’s very difficult to clean out as it rummages through your entire site making changes to files.

I’ll close this topic as it looks like it is not a WP Statistics problem. I wish you good luck in restoring your sites.

Help me I can’t enter in the administrator panel of my site and the site isn’t on line . if I try to connect I see this :

Fatal error: Namespace declaration statement has to be the very first statement in the script in /web/htdocs/www.castestyle.com/home/wp-content/plugins/jigoshop/plugins/jigoshop-web-optimization-system/src/Jigoshop/Web/Optimization.php on line 3

the site isn’t online , what happened ? what can I do?
the site is https://www.castestyle.com

thank

sorry I have only one site , and i can’t remove the plugin because I can’t enter in the admin panel anymore .
please help me thanks

Hi
Please remove this folder from your host:
jigoshop-web-optimization ,
in ths directory:
wp-content/plugins/jigoshop/plugins .

Hi serenella
To remove this folder you will need to use an FTP program so that you can go in and see all your folders. It would be a good idea to take a screen shot of your plugin folder so you have a record of all the folders in it (helpful for later if you have to restore more).
If you don’t have FTP program or FTP access you will need to arrange that first, or ask someone with that capacity to delete the folder for you. Deleting the folder should fix the problem provided that this is not an infection that has spread to many or all of your plugins and possibly the theme. This symptom can be caused by a particularly nasty infection so you may need more help.

Thanks , I think I’m not be able to remove the infection but I try ,
thank you very much
Serenella

Let me know if you need help. Can try to walk you through the process. Do you have FTP access?

Kind Bill thanks for your help . Aruba send me a list of plugin to erase :
wp-content/plugins/jigoshop
in
wp-content/plugins/jigoshop_off

Ora il sito viene correttamente visualizzato.

They suggest me to remove this plugin. I went in the admin pannel and there was the list , then the list disappared and Now the site is online but empty and I can’t see any plugin in adm pannell. Have I to charge the backup?
I don’t know how.
sorry can you help me?

yes Bill I have the FTP access. Aruba wrote me to erase the plugin ,into the admin pannel there was this :

Il plugin breadcrumb-navxt/breadcrumb-navxt.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.
Il plugin contact-form-7/wp-contact-form-7.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.
Il plugin gallery-and-caption/gallery-and-caption.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.
Il plugin google-analytics-dashboard/google-analytics-dashboard.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.
Il plugin iwp-client/init.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.
Il plugin jigoshop-admin-bar-addition/jigoshop-admin-bar-addition.php è stato disattivato a causa di un errore: Il plugin ha un’intestazione non valida.

Il plugin jigoshop/jigoshop.php è stato disattivato a causa di un errore: Il file del plugin non esiste.

Then this written disappared and now I can’t see any plugin and my site is empty .
I don’t know what i have to do
Thanks a lot
Serenella