Fatal error when running scan

Did you try to enable debugging in WordPress? If that’s a PHP error, you may be able to catch and log it:
1. Open your wp-config.php
2. Search for:
define('WP_DEBUG', false);
3. Replace with:
define('WP_DEBUG', true);
4. Add this line below:
define( 'WP_DEBUG_LOG', true );
5. Run NinjaScanner until you get the error.

The log (if any) will be located in “/wp-content/debug.log”.
Afterwards, you could undo those modifications.

Hello @nintechnet,

I′ve enabled debug mode in WordPress as you suggested. While running the scan with WordPress using built-in Ajax Process Execution, debug.log file said:

`[13-Sep-2021 22:16:02 UTC] PHP Warning: require(/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php): failed to open stream: No such file or directory in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207
[13-Sep-2021 22:16:02 UTC] PHP Fatal error: require(): Failed opening required ‘/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php’ (include_path=’.:/opt/cpanel/ea-php73/root/usr/share/pear’) in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207
[13-Sep-2021 22:16:58 UTC] PHP Warning: require(/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php): failed to open stream: No such file or directory in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207
[13-Sep-2021 22:16:58 UTC] PHP Fatal error: require(): Failed opening required ‘/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php’ (include_path=’.:/opt/cpanel/ea-php73/root/usr/share/pear’) in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207`

When running using built-in WP-CRON, debug.log file didn′t give any other error or warning but NinjaFirewall gave a message in WP dashboard:

The scanning process doesn′t seem to be able to start. If your website is password-protected using HTTP basic authentification, you can enter your username and password in the “Settings >> Advanced Settings” section.

But that′s not the case. About this second try, the plugin′s Log tab says:

13-Sep-21 22:19:38 INFO Cancelling scanning process
13-Sep-21 22:19:40 INFO Cancelling scanning process

I′ve requested more information about these errors in order to ask properly in this forum but the hosting said they′re not registered in the system. Do you know why?

Thanks,

Julia

It looks like the NinjaScanner installation is corrupted.
Can you try to reinstall it:
1. Download NinjaScanner from this page: https://downloads.www.ads-software.com/plugin/ninjascanner.3.0.8.zip
2. Go to the “Plugins” page, click “Add New” and “Upload Plugin”.
3. Select the file you downloaded and upload it. WordPress will tell you that it is already installed. Select “Replace current with uploaded”.
4. Try to scan, using the “Ajax Process Execution” forking method.

Hello @nintechnet,

I′ve downloaded the plugin from the link you provided, replaced the previous one in WP dashboard, enabled debug mode in WordPress, run again the scan with AJAX Process Execution forking method and the proces was aborted.

debug.log file says:

`[14-Sep-2021 16:37:12 UTC] PHP Warning: require(/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php): failed to open stream: No such file or directory in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207
[14-Sep-2021 16:37:12 UTC] PHP Fatal error: require(): Failed opening required ‘/home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/scan.php’ (include_path=’.:/opt/cpanel/ea-php73/root/usr/share/pear’) in /home/rabbitr1/public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php on line 207`

Plugin′s Log tab says:

14-Sep-21 16:37:12 ERROR Fatal error: the HTTP server returns a [500 Internal Server Error] HTTP code. Aborting
14-Sep-21 16:37:16 INFO Cancelling scanning process

error.log file and cpanel′s Errors tab didn′t show errors/warnings.

I wonder why the server is not registering these errors, I only have a quite generic reference (500).

Thanks,

Julia

Can you connect to your site over FTP, go to the “public_html/wp-content/plugins/ninjascanner/lib/” folder and ensure that the following two files exist:
-public_html/wp-content/plugins/ninjascanner/lib/scan.php
-public_html/wp-content/plugins/ninjascanner/lib/ajax_hooks.php

It looks like the ‘scan.php’ is missing.

Hello @nintechnet,

The server’s security system deleted the file because it had signatures that were similar to malware. It was false positive hit by the file scanner. Now the file has been whitelisted on the server and it will no longer auto delete. The signature mentioned was:

# Regular expression match = [\n(?!\s*(//|\#|\*)).*\.ssh/]

The hosting managed the upload.

After running the scan, the plugin reported about scan.php file:

This file does not match the original plugin file and may have been damaged or infected.

You can click on the “View Changes” link below the file, that will show the differences between your file and the original one.

It says:

Those files have different line endings (LF vs CRLF).

I don′t know what that means or what to look for. I′m telling just in case is useful for you.

Thanks @nintechnet,

Julia

LF is a Linux/Mac file ending character while CRLF is from Microsoft Windows. That simply means the file was uploaded or modified using a wrong file ending. That’s not a problem but the scanner will detect it and warn you. You can simply click on the “Restore File” link and it will fix that issue automatically.

Ok!