Mika Epstein

I did a quick scan of your site and you have been hacked.

I deleted the hacked files in wp-includes and wp-admin, as well as ./wp-content/plugins/wp-ajax-gadget.php but you should submit a support ticket for a full hack scan so we can make sure it’s all the way clean.

webdorado – Just FYI, asking people to email you off the forums is generally frowned on, since it makes it impossible for the next person to learn what the problem MIGHT be ??

kclovemmg your error log is FILLED with this:

File does not exist: /home/USER/millionmilegreenway.org/wp-content/plugins/embed-webmap/public/assets, referer: https://www.millionmilegreenway.dreamhosters.com/?page_id=731

You should turn off that plugins and test again. It looks like it’s throwing some weird JS and CSS errors.

I checked just now and there’s nothing in your .htaccess that is off (nothing weirder than BulletProof Security at least).

Are you still having this issue?

Whatever’s putting in the ?download is probably the issue.

What other plugins are you running? Anything for monitoring downloads?

I can’t see why that would happen, looking at the code here. How odd. It’s POSSIBLE you had another plugin that smacked into it.

FWIW, on DreamHost we have wp-cli so you can use the command wp db reset

https://wp-cli.org/commands/db/reset/

I checked your server and your DB and everything there looks fine.

You’re using a couple plugins that can be pretty heavy: yet-another-related-posts-plugin and p3-profiler.

I would remove yet-another-related-posts-plugin and use the feature in Jetpack instead, since you already have that installed. Also you should remove the profiler if you’re not actively using it.

Also you may need to play with W3TC to optimize it a bit more. I would actually suggest WP Super Cache, since you’re on a shared server.

If it doesn’t work, what domain is it and maybe we can see where it’s stuck?

I think the API Endpoint is the bigger issue. DreamSpeed should just ignore that.

https://www.ads-software.com/plugins/dreamspeed-cdn/ may be the alternative, since I’ve been poking at tcS3 and I don’t see an easy way to force it around.

Just FYI, all shared servers have that 125MB limit.

VPS, Dedis and DreamPress are always something we can increase for you ?? Just pop us a ticket and we’re happy to help (a 50MB file takes upwards of 90MB of temp space when being processed).

Did you set up max-age or expires in your .htaccess?

https://wiki.dreamhost.com/Htaccess_tricks#Faster_Page_Load_Times_.2F_Bandwidth_Saver

Just to be sure I understand that, it’s an issue with the SSL server and not the apache (webhost) server?

GoDaddy is the SSL cert, DreamHost is the webhost. It’s so confusing so fast :/

Jeremy, we can’t do that on his server but since when did you guys start blocking TLS1.0? I swear we’ve talked about this before and it was okay that we have TLS.

SSL-Session:
Protocol : TLSv1
Cipher : AES128-SHA
Session-ID: REDACTED
Session-ID-ctx:
Master-Key: REDACTED
Key-Arg : None
Start Time: 1417540278
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)

I think the verify is what’s the issue here.

Magic Quotes isn’t on for anyone (unless you turned it on…)

This usually happens with your wp-config.php setting the DB_CHARSET to utf8 when your DB isn’t. You can change that value to define( 'DB_CHARSET', '' ); as a test.

My email JUST decided to deliver this…

This usually happens with your wp-config.php setting the DB_CHARSET to utf8 when your DB isn’t. You can change that value to define( 'DB_CHARSET', '' ); as a test.

Can you ask your host (assuming GoDaddy) if they’re restricting access to xmlrpc?

I know at DreamHost we have it protected by mod security, btu we whitelist Jetpack and WordPress.com (for obvious reasons).