H5p question

  • Resolved onixfernando

    (@onixfernando)


    4 years, 1 month ago

    Hello,

    I’ve been using this amazing plugin for more than 4 years but since last year my hosting provider has put in quarentine some of the files from the activities I’ve created using H5P. Last night I was trying to create some new activities but the tool won’t open and it goes on and on in a loop. I don’t know if this issue has to do with the fact that the plugin hasn’t been updated in more than 5 months or if the issue is being provoked for some other reason. The issue is that now my hosting provider sent all my activities that were created with H5p to quarentine and said that the only way to have those files back to their original place was to contact the plugin developer in order to find the source of the problem and solve it.

    I am attaching a file with the “malicious code” for you to take a look at it. [https://www.mediafire.com/file/mr9whibr0jo30fp/h5p-5f2ab9e72763f.h5p/file]

    Thanks for your help.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author icc0rz

    (@icc0rz)

    As far as I can tell you’re site has probably been infected or hacked somehow. The file you’ve shared is not a valid H5P file.
    The plugin does not require the .h5p export files to function, you can delete them and they should regenerate on the next view if the download option is enabled.
    Are there any files from the wp-content/uploads/h5p/libraries or wp-content/plugins/h5p that’s been put in quarentine?

    What I would do in such a case is to investigate where the issue originated, revert back to my latest working backup and then ensure that it doesn’t happen again.

    I ran the file through virus total, but it doesn’t seem to contain any (known) malicious code, cmp. https://www.virustotal.com/gui/file/c41139df7de3119f44ed1918f076f15aaa6cf302119718ef2eb895d19ce59ca9/detection

    The file still seems to be a zip archive although it’s corrupted, so maybe the zipping/writing process was interrupted? Any server timeouts? Hit your storage quota? …

    Thread Starter onixfernando

    (@onixfernando)

    I notified my hosting provider. I’ll update you in case they have any additional comments/recommendations.

    Thanks guys.

    Thread Starter onixfernando

    (@onixfernando)

    I have a question though: do H5P activities get stored in any folder or just in a database? I was taking a look at my CPanel but couldn’t find a folder with the activities stored in it. I only found the archives attached to them (images, sound, etc) and the actual activities stored in the database. The “activities put in quarentine by my hosting provider were located in a temp folder and this cought my attention.

    H5P stores parameters and metadata of contents inside the database, uploaded media like images or audios in /wp-content/uploads/h5p/content (one directory for each content), and the complete files intended for downloading in /wp-content/uploads/h5p/exports.

    As far as I know, the latter may change in the future and complete files may be only be created on demand instead of saving them in the aforementioned directory each time the content is saved.

    The temp folder at /wp-content/uploads/h5p/temp is only used, well, temporarily, e.g. when uploading files in the editor or when saving content in order to compress the .h5p files for download.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘H5p question’ is closed to new replies.