cannon303

Hi Tuhin the cPanel login page doesn’t offer a password reset link unless there is a different login page somewhere that I do not have access to. The address to cPanel that I have been given isn’t the usual domainname.com/cpanel but instead it’s an addess using the IT company URL. Regarding your second question, I no longer have access to cPanel so cannot see that info without requesting it but I can tell you it certainly won’t contain my email address. All I have is a username and now an out of date password.

Hi Tuhin a really big thanks for your question. It has helped me jog my memory. The first time I logged into cPanel I didn’t look at the logs at this time because I was preoccupied with fixing the site. I did however make a note of the IP address in Last Login field in the main area of cPanel. The next time I logged in was to check the logs and there was very little information. The last login field this time was the IT company.

I just checked out that original IP that I made a not of and it’s based in S?o Paulo so I guess that proves someone gained access to cPanel.

It’s not possible for a vulnerability in WordPress to allow access to cPanel is there?

Thanks Tuhin. The IT company have closed access to me for their cPanel logs so I cannot see anything now anyway.

Thanks Tuhin unfortunately there was very little information in the logs and last login IP was the IT company. Do you know of any file manager plugins that could delete the website?

• This reply was modified 11 months, 3 weeks ago by cannon303.

Thanks Ashutosh but let’s just say, judging by its content, the website that was uploaded wasn’t the kind of website the IT company would look after. And I have a backup but nice to know that nobody seems to think the activity stems from a vulnerability in WordPress.

Thanks James that is what I thought, however, the IT company that looks after the hosting are pointing to the problem being with WordPress and the plugins rather than someone accessing the hosting. I personally can’t see how someone could delete the whole website just through WordPress unless someone can tell me otherwise.

• This reply was modified 11 months, 3 weeks ago by cannon303.
• This reply was modified 11 months, 3 weeks ago by cannon303.

Thanks Steven and yes all of that has been undertaken. As forum moderator, have you ever been made aware of any vulnerabilities in WordPress or a plugin that has allowed someone to delete the entire website files?

Thanks Steve that’s great news. Re updating the sites: yes I hear you, unfortunately some clients do not want to pay for updating their website and would much sooner I maintain them all for free which is a continuing problem I deal with.

Thanks for your help @mrtom414. That’s pretty poor from WordPress. I’m trying to create a super optimised site and it means I’m going to have to manually create all of the images sizes myself. Unless of course there is indeed a plugin to the rescue….

ok thanks very much for the info. I just need to work out how to create some custom resize script and then I’m there.

Hi thanks it’s not resolved but never mind.

Thanks but that’s not what I’m after. I would like the user to be able to edit content but should go up for review before the edits have been made live.

Yeah I cant find it either?? There’s nowhere to enable the gallery, there’s no gallery tab. When I “simply going to Ultimate Member tab settings and enabling it from there” – there is nowhere to enable it there. It doesn’t mention it, no tick box, nada, zilch.

There are a lot of settings and tabs in Ultimate Member -> Settings. Maybe you could say exactly where it is that you can enable the gallery plugin?

Any help would be much appreciated.

• This reply was modified 3 years, 7 months ago by cannon303.

I’d like to know if video can be uploaded. Is there a way to change the supported file types in the file uploader to allow mp4?

Thanks.

I’m sorry I don’t understand what that means Joy but not to worry. I really do need that functionality. Thanks.