[wp-hackers] Need Help, I cannot figure this out.
Jeremi Bergman
jeremib at gmail.com
Fri Feb 5 19:05:01 UTC 2010
Thanks all for the help, here's what we have:
.htaccess file:
> RewriteRule ^admin(.*)$ http://mrsec.com/old/admin [L,QSA]
>
> # BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
> # END WordPress
Activated Plugins:
Advanced Category Excluder
This plugin helps you to manage your content, RSS feeds, sidebar widgets,
and fine tune where you want to display your posts, pages, links, link
categories, or hide.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=advanced-category-excluder%2Fadvanced-category-excluder.php&plugin_status=active&paged=1&_wpnonce=653ee89a17>
Version 1.4.3 | By DjZoNe <http://djz.hu/> | Visit plugin
site<http://ace.dev.rain.hu/>
Akismet
Akismet checks your comments against the Akismet web service to see if they
look like spam or not. You need a WordPress.com API
key<http://akismet.com/get/> to
use it. You can review the spam it catches under "Comments." To show off
your Akismet stats just put <?php akismet_counter(); ?> in your template.
See also: WP Stats plugin <http://wordpress.org/extend/plugins/stats/>.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=akismet%2Fakismet.php&plugin_status=active&paged=1&_wpnonce=055cb84e70>
Version 2.2.7 | By Matt Mullenweg <http://ma.tt/> | Visit plugin
site<http://akismet.com/>
EasySMS
SMS message your readers and broadcast a new post to user cell phones
automatically. User group organization. Add custom carriers.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=easysms%2Feasysms.php&plugin_status=active&paged=1&_wpnonce=fd25bc4bf7>
Version 2.0.7.2 | By Brian Fegter <http://www.misternifty.com/> | Visit
plugin site <http://www.misternifty.com/easysms/>
Google Custom Search Plugin
Integrate Google Custom Search into WordPress
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=google-custom-search-for-wordpress%2FGoogleCSE.php&plugin_status=active&paged=1&_wpnonce=56975eb3e8>
Version 1.2 | By Aleem Bawany <http://aleembawany.com/about/aleem-bawany/>
| Visit plugin
site<http://aleembawany.com/projects/wordpress/google-custom-search-plugin/>
Google XML Sitemaps
This plugin will generate a sitemaps.org compatible sitemap of your
WordPress blog which is supported by Ask.com, Google, MSN Search and
YAHOO.Configuration
Page <http://www.mrsec.com/wp-admin/options-general.php?page=sitemap.php>
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=google-sitemap-generator%2Fsitemap.php&plugin_status=active&paged=1&_wpnonce=a021c8be5d>
Version 3.2 | By Arne Brachhold <http://www.arnebrachhold.de/> | Visit
plugin site <http://www.arnebrachhold.de/redir/sitemap-home/> |
Settings<http://www.mrsec.com/wp-admin/options-general.php?page=google-sitemap-generator/sitemap.php>
| FAQ <http://www.arnebrachhold.de/redir/sitemap-plist-faq/> |
Support<http://www.arnebrachhold.de/redir/sitemap-plist-support/>
| Donate <http://www.arnebrachhold.de/redir/sitemap-plist-donate/>
There is a new version of Google XML Sitemaps available. View version 3.2.2
Details<http://www.mrsec.com/wp-admin/plugin-install.php?tab=plugin-information&plugin=google-sitemap-generator&TB_iframe=true&width=640&height=728>
or upgrade automatically<http://www.mrsec.com/wp-admin/update.php?action=upgrade-plugin&plugin=google-sitemap-generator%2Fsitemap.php&_wpnonce=97dfad65fb>
.
Mailing List
Allow users to subscribe to mutliple mailing lists from your website. Send
out mass newsletters, manage newsletter templates, import subscribers and
much more.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=wp-mailinglist%2Fwp-mailinglist.php&plugin_status=active&paged=1&_wpnonce=aecd3bab2c>
Version 3.6.7.2 | By Tribulant Software <http://tribulant.com/> | Visit
plugin site <http://tribulant.com/products/view/1/wordpress-mailing-list>
MrSEC Options Manager
Used to control the source for the main page (http://mrsec.com/)
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=MrSEC-options%2FMrSEC-options.php&plugin_status=active&paged=1&_wpnonce=9b2aabbc2d>
By Robert L. Keen, Bergman Consulting <http://jeremibergman.com/> | Visit
plugin site <http://jeremibergman.com/>
NextGEN Gallery
A NextGENeration Photo gallery for the Web 2.0.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=nextgen-gallery%2Fnggallery.php&plugin_status=active&paged=1&_wpnonce=774055e10b>
Version 1.4.3 | By Alex Rabe <http://alexrabe.de/> | Visit plugin
site<http://alexrabe.de/?page_id=80>
| Overview <http://www.mrsec.com/wp-admin/admin.php?page=nextgen-gallery>
| Get help <http://wordpress.org/tags/nextgen-gallery?forum_id=10> |
Contribute <http://code.google.com/p/nextgen-gallery/> |
Donate<http://alexrabe.de/donation/>
Register Plus
WordPress 2.5+ ONLY. Enhance your Registration Page. Add Custom Logo,
Password Field, Invitation Codes, Disclaimer, Captcha Validation, Email
Validation, User Moderation, Profile Fields and more.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=register-plus%2Fregister-plus.php&plugin_status=active&paged=1&_wpnonce=62e04c4883>
Version 3.5.1 | By Skullbit <http://www.skullbit.com/> | Visit plugin
site<http://skullbit.com/wordpress-plugin/register-plus/>
ShareThis
Let your visitors share a post/page with others. Supports e-mail and
posting to social bookmarking sites. Configuration options are
here<http://www.mrsec.com/wp-admin/options-general.php?page=sharethis.php>.
Questions on configuration, etc.? Make sure to read the README.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=share-this%2Fsharethis.php&plugin_status=active&paged=1&_wpnonce=762237087d>
Version 3.2 | By ShareThis <http://sharethis.com/> | Visit plugin
site<http://sharethis.com/>
Simple:Press Forum
The WordPress Forum Plugin
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=simple-forum%2Fsf-control.php&plugin_status=active&paged=1&_wpnonce=fcf2f7ce22>
Version 4.0.4 | By Andy Staines & Steve Klasen<http://simplepressforum.com/>
| Visit plugin site <http://simplepressforum.com/>
Latest version available: 4.1.3 - Build: 2510 - The latest ultimate forum
plugin for WordPress, Simple:Press Forum version 4.1.3, is now available.
THIS IS A RECOMMENDED SECURITY RELEASE FOR ALL USERS!
Please remember to protect any customisation you may have made to skins,
icons, program hooks or pluggable functions
For details and to download please visit: Simple:Press
Forum<http://simplepressforum.com/> (Please
Note: Automatic Upgrade is not available)
Simple Forum Cron Link
Registers a cron job to pickup and post new stories to the forum every 5
minutes
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=simple-forum-cron%2Fsimple-forum-cron.php&plugin_status=active&paged=1&_wpnonce=b4f1e7c5b7>
Version 1.0 | By Jeremi Bergman <http://jeremibergman.com/> | Visit plugin
site <http://jeremibergman.com/#>
Simply Exclude
Provides an interface to selectively exclude/include categories, tags and
page from the 4 actions used by WordPress. is_front, is_archive, is_search,
is_feed.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=simply-exclude%2Fsimplyexclude.php&plugin_status=active&paged=1&_wpnonce=88c3f61309>
Version 1.7.6 | By Paul Menard <http://www.codehooligans.com/> | Visit
plugin site <http://www.codehooligans.com/2008/04/27/simply-exclude-plugin/>
Target Blank In Posts And Comments
Keep your visitors. Inserts target="_blank" into post and comment content
URLs and external links will open in new tabs.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=target-blank-in-posts-and-comments%2Ftarget-blank-in-posts.php&plugin_status=active&paged=1&_wpnonce=02f526064e>
Version 3.2 | By Lazar Kovacevic <http://www.inverudio.com/> | Visit plugin
site<http://www.inverudio.com/programs/WordPressBlog/NewTabWindowTargetBlankPlugin.php>
WP-EMail
Allows people to recommand/send your WordPress blog's post/page to a
friend.
Deactivate<http://www.mrsec.com/wp-admin/plugins.php?action=deactivate&plugin=wp-email%2Fwp-email.php&plugin_status=active&paged=1&_wpnonce=02059b8d3f>
Version 2.50 | By Lester 'GaMerZ' Chan <http://lesterchan.net/> | Visit
plugin site <http://lesterchan.net/portfolio/programming/php/>
The permalink setup is as follows:
Custom Structure
Optional
If you like, you may enter custom structures for your category and tag URLs
here. For example, using topics as your category base would make your
category links likehttp://example.org/topics/uncategorized/. If you leave
these blank the defaults will be used.
Category base Tag base
Are you using any WP plugins to manage redirects or canonical URL creation?
No.
Jeremi Bergman
865-951-5354
On Fri, Feb 5, 2010 at 11:58 AM, Dave Viner <dave at vinertech.com> wrote:
I definitely agree with Mike.
>
> Here's an interesting test that I just ran.
>
> % lwp-request -SUse "http://mrsec.com/about" | less
> GET http://www.mrsec.com/story/about-12-minutes-of-good-basketball
> User-Agent: lwp-request/5.810
>
> GET http://mrsec.com/about --> 301 Moved Permanently
> GET http://www.mrsec.com/story/about-12-minutes-of-good-basketball --> 200
> OK
> Connection: close
> Date: Fri, 05 Feb 2010 16:50:53 GMT
> Server: Apache/2.2.9 (Debian) DAV/2 PHP/5.2.6-1+lenny4 with Suhosin-Patch
> mod_ssl/2.2.9 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0
> Vary: Accept-Encoding
> ...
>
> As you can see requesting the "About" page caused the server to issue a 301
> to the "About 12 minutes of Good Basketball" page. This suggests that
> there's likely something wrong in your rewrite rules. I would guess that
> the redirect occurs because the URL /about matches the beginning of the
> story URL (/about-12-mintes...)
>
> I'd look first to see if Apache is doing some rewriting itself. Are there
> special rewrite rules you've enabled in the apache config?
>
> Alternatively, you can uncomment these lines from your apache config:
>
>
> #<IfModule mod_rewrite.c>
>
> #RewriteLog "/var/www/vhosts/mrsec.com/statistics/logs/rewrite_log"
>
> #RewriteLogLevel 9
>
> #</IfModule>
>
>
> But, don't set RewriteLogLevel to 9. Anything over 3 is a *massive* amount
> of information.
>
> If there are no special rules in the apache config or .htaccess, then, I'd
> move on to look at WordPress.
>
> The next thing to test would be the rewrite rules that are operating inside
> WordPress. Something in there is matching titles too loosely. I *suspect*
> that there's some regular expression that doesn't have the right start/end
> token in the regex (such that "/about-12-minutes.." matches "/about").
>
> Are you using any WP plugins to manage redirects or canonical URL creation?
>
> Dave Viner
>
>
>
> On Fri, Feb 5, 2010 at 1:22 AM, Mike Little <wordpress at zed1.com> wrote:
>
>
> > Jeremi
>
> >
>
> > A couple of things to check, when the wrong page is delivered, e.g. rss
>
> > feed
>
> > instead of about page, what does the apache log record? It will likely be
>
> > difficult to check when the site is busy but looking for a know ip
> address
>
> > at a specific time will help you tie it down. Does the apache log record
>
> > the
>
> > the request was for about or for the feed? If for the about page, then
> you
>
> > can rule out external, influences. I suspect you have got to that stage
>
> > already.
>
> > The next thing is to tie that request in with the rewrite logs - I think
>
> > Shane has already determined that things look ok.
>
> >
>
> > So you are probably back to something going wrong within WordPress'
>
> > execution chain.
>
> >
>
> > It may be a shot in the dark, but I once had a vaguely similar issue with
> a
>
> > client's site. In this case the page title was being set to the wrong
>
> > thing.
>
> > So the home page might have a title tag of search results! It
>
> > was intermittent (but was then cached by a front end caching server!) but
>
> > was defintiley happening under high load.
>
> >
>
> > I had just enabled All in one SEO plugin, and when I turned it off again,
>
> > it
>
> > went away.
>
> >
>
> > I think it was going wrong because AIOSEO does whole page buffering and I
>
> > believed that there might be a threading issue with specific versions of
>
> > PHP and output buffering. So that the buffered contents of one request
> were
>
> > returned to the code running a different request. In my case the site was
>
> > running an out of date version of PHP, and running on Windows.
>
> >
>
> > I see you are not running on Windows, but I think it is worth checking
>
> > these
>
> > two things.
>
> > Are you running a plugin that does lots of output buffering?
>
> > and is your version of PHP up-to-date?
>
> >
>
> > Another thing I would try: When you get a wrong page - save the HTML and
>
> > headers. Then access the page you received directly and save the HTML and
>
> > headers. Compare the two pairs (possibly ignoring time stamps). If they
> are
>
> > identical, then the error may well be in the template/redirection logic
>
> > within WordPress and it's plugins.
>
> > If they are different, then I would more strongly suspect output
> buffering.
>
> >
>
> >
>
> >
>
> > Hope this helps,
>
> >
>
> >
>
> > Mike
>
> > --
>
> > Mike Little
>
> > http://zed1.com/
>
> > _______________________________________________
>
> > wp-hackers mailing list
>
> > wp-hackers at lists.automattic.com
>
> > http://lists.automattic.com/mailman/listinfo/wp-hackers
>
> >
>
> _______________________________________________
>
> wp-hackers mailing list
>
> wp-hackers at lists.automattic.com
>
> <http://lists.automattic.com/mailman/listinfo/wp-hackers>
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>
>
More information about the wp-hackers
mailing list