lekiend

@frederik Townes: Hello, i do not know how hackers do but I’m sure they are able to publish files in the W3TC cache directory. Those malicious files were not present anywhere else in the server. W3TC was still working.
Hackers do not try to crash or delete any files on my server. They are searching to use a part of my server as a fake website to fish banking companies.

If those malicious files could help you to identify the problem, i can send them to you. I copied them in a directory outside apache repository.

Regards
Dimitri

Hello,
Thanks for your answer.
Sorry but I deactivated and delete W3tc totally from my website. I can not test anymore.
In fact, it is too dangerous because those malicious files are used for fishing banking companies.

Malicious files were named like indentification.007.php and more…

Regards
Dimitri

I’m sure 100% that W3 total cache is not secure.
I deactivate it and delete all the files from my website and I didn’t have any attack anymore. I reactivated yesterday and few hours after, malicious files were in the W3tc cache directory again.

Please correct that.

Thanks

Yes!
Works perfectly with New version 4.2

Hello,
No conflict with other plugins. I deactivated them all and i’ve still this error.
I tried everything in the post you suggest to me but nothing change.

Dimitri

Hello,
I got this error at the front.
Yes, WordPress and Buddypress works great !

The error comme from a file in the events-manager directory

See printscreen (sorry, it is in French ??

Dimitri

I’ve changed the rights into “settings/users capabilities” and it works again. I’ve added rights to author users.

Dimitri

I simply uncomment (remove //) the line @ini_set(‘memory_limit’, ‘128M’); into /wp-content/plugins/nextgen-gallery/lib/gd.thumbnail.inc.php.

Problem solved !

Regards

As said agreis, i simply uncomment (remove //) the line @ini_set(‘memory_limit’, ‘128M’); into /wp-content/plugins/nextgen-gallery/lib/gd.thumbnail.inc.php.

Problem solved for me.

Regards

With version 1.7.4, no thumbnails generated.
It was working perfect with version 1.7.3

Dimitri

OK,
No, I do not use buddypress or multisite for this site.

I’m waiting for your update ??

Dimitri

It is not version 3.0.3.4 but Version 1.7.4

The last version of shadowbox solve the problem.

I have exactly the same problem.
In addition, the code ;player=img;"> is showing on concerned pages.

If you have a solution, please share ??

Best regards
Dimitri

The code ;player=img;"> is showing on concerned pages