Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. What have I gotten myself into now?

What have I gotten myself into now?

Scheduled Pinned Locked Moved The Lounge
helpphphtmlmysqlsecurity
8 Posts 5 Posters 2 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    K Offline
    kmoorevs
    wrote on last edited by
    #1

    I have just spent 5 hours on the cellphone/remote with a colleague trying to help out her friend who is in charge of their org's WordPress site. The last hour and a half were spent trying to find/fix an issue on my colleague's computer where the strangest thing happened whilst adding a new page/report. When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge. At the time, her friend was still able to access the same site, as was I. After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can. :confused: No matter what page she goes to, the same code is coming back which leads me to believe that a wp plugin or maybe even something upstream on the host is blocking the request and stupidly spitting out malformed html/headers. The intended page is some sort of self-submitting form with elemets using the name wsidchk that seems possibly to be related to cloudflare. What I've tried: 0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls. 1: Verifying that a cloudflare plugin is not active on their site. 2: Temporarily turning off the only security related plugin. (meant to prevent login abuse) 3: Deleting her browser cache and trying Edge. Edge also displayed the html code. 4: Tried on my 2 systems with multiple browsers. It works on my machines! :laugh: Not just the site, but the things that they needed help before they were unable to access the site. Everything works as it should, I've done what you needed me to do. Is it really now my problem that you are having problems accessing your website? The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql. At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site. :sigh: I've got a good mind to start billing by the hour! My day is shot! X|

    "Go forth into the source" - Neal Morse "Hope is contagious"

    D J 2 Replies Last reply
    0
    • K kmoorevs

      I have just spent 5 hours on the cellphone/remote with a colleague trying to help out her friend who is in charge of their org's WordPress site. The last hour and a half were spent trying to find/fix an issue on my colleague's computer where the strangest thing happened whilst adding a new page/report. When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge. At the time, her friend was still able to access the same site, as was I. After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can. :confused: No matter what page she goes to, the same code is coming back which leads me to believe that a wp plugin or maybe even something upstream on the host is blocking the request and stupidly spitting out malformed html/headers. The intended page is some sort of self-submitting form with elemets using the name wsidchk that seems possibly to be related to cloudflare. What I've tried: 0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls. 1: Verifying that a cloudflare plugin is not active on their site. 2: Temporarily turning off the only security related plugin. (meant to prevent login abuse) 3: Deleting her browser cache and trying Edge. Edge also displayed the html code. 4: Tried on my 2 systems with multiple browsers. It works on my machines! :laugh: Not just the site, but the things that they needed help before they were unable to access the site. Everything works as it should, I've done what you needed me to do. Is it really now my problem that you are having problems accessing your website? The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql. At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site. :sigh: I've got a good mind to start billing by the hour! My day is shot! X|

      "Go forth into the source" - Neal Morse "Hope is contagious"

      D Offline
      D Offline
      dandy72
      wrote on last edited by
      #2

      kmoorevs wrote:

      I have been provided with credentials to manage their WP,

      Congratulations on becoming sorry, you're now their web site admin.

      K 1 Reply Last reply
      0
      • D dandy72

        kmoorevs wrote:

        I have been provided with credentials to manage their WP,

        Congratulations on becoming sorry, you're now their web site admin.

        K Offline
        K Offline
        kmoorevs
        wrote on last edited by
        #3

        Did I mention that I despise WP/PHP/MySQL? They couldn't pay me enough!...well everything's negotiable but I would have to insist on a proper web application, not wordpress.

        "Go forth into the source" - Neal Morse "Hope is contagious"

        1 Reply Last reply
        0
        • K kmoorevs

          I have just spent 5 hours on the cellphone/remote with a colleague trying to help out her friend who is in charge of their org's WordPress site. The last hour and a half were spent trying to find/fix an issue on my colleague's computer where the strangest thing happened whilst adding a new page/report. When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge. At the time, her friend was still able to access the same site, as was I. After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can. :confused: No matter what page she goes to, the same code is coming back which leads me to believe that a wp plugin or maybe even something upstream on the host is blocking the request and stupidly spitting out malformed html/headers. The intended page is some sort of self-submitting form with elemets using the name wsidchk that seems possibly to be related to cloudflare. What I've tried: 0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls. 1: Verifying that a cloudflare plugin is not active on their site. 2: Temporarily turning off the only security related plugin. (meant to prevent login abuse) 3: Deleting her browser cache and trying Edge. Edge also displayed the html code. 4: Tried on my 2 systems with multiple browsers. It works on my machines! :laugh: Not just the site, but the things that they needed help before they were unable to access the site. Everything works as it should, I've done what you needed me to do. Is it really now my problem that you are having problems accessing your website? The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql. At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site. :sigh: I've got a good mind to start billing by the hour! My day is shot! X|

          "Go forth into the source" - Neal Morse "Hope is contagious"

          J Offline
          J Offline
          Jeremy Falcon
          wrote on last edited by
          #4

          kmoorevs wrote:

          When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge.

          It's not strange at all. The web server was configured incorrectly and was most likely serving the document as plain text. They got the wrong mime type.

          kmoorevs wrote:

          After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can

          Could be a number of reasons. The most common one is you still had a cached copy of the site or vice versa. Could also be more than one server in a farm responding to the request depending on location where only one server out of N is configured incorrectly, etc.

          kmoorevs wrote:

          0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls.

          There's this magical phrase called "No thanks". Try it. Unless you're romantically interested in this chick, there's no need to bend over backwards.

          kmoorevs wrote:

          1: Verifying that a cloudflare plugin is not active on their site.

          This may explain a lot. Cloudflare does MIME types and also caches. Maybe someone who didn't know what they were doing "set it up".

          kmoorevs wrote:

          3: Deleting her browser cache and trying Edge. Edge also displayed the html code.

          So it sounds like the working version is the cached version.

          kmoorevs wrote:

          The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql.

          Yeah but that's not your problem. It's not being mean to value your time. If they want your assistance they can pay for it; otherwise, they should not be in business.

          kmoorevs wrote:

          At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site

          You mean access the backend or public site? I'm willing to bet you're not the only one that can access the public site.

          kmoorevs wrote:

          I've got a

          C K 2 Replies Last reply
          0
          • J Jeremy Falcon

            kmoorevs wrote:

            When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge.

            It's not strange at all. The web server was configured incorrectly and was most likely serving the document as plain text. They got the wrong mime type.

            kmoorevs wrote:

            After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can

            Could be a number of reasons. The most common one is you still had a cached copy of the site or vice versa. Could also be more than one server in a farm responding to the request depending on location where only one server out of N is configured incorrectly, etc.

            kmoorevs wrote:

            0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls.

            There's this magical phrase called "No thanks". Try it. Unless you're romantically interested in this chick, there's no need to bend over backwards.

            kmoorevs wrote:

            1: Verifying that a cloudflare plugin is not active on their site.

            This may explain a lot. Cloudflare does MIME types and also caches. Maybe someone who didn't know what they were doing "set it up".

            kmoorevs wrote:

            3: Deleting her browser cache and trying Edge. Edge also displayed the html code.

            So it sounds like the working version is the cached version.

            kmoorevs wrote:

            The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql.

            Yeah but that's not your problem. It's not being mean to value your time. If they want your assistance they can pay for it; otherwise, they should not be in business.

            kmoorevs wrote:

            At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site

            You mean access the backend or public site? I'm willing to bet you're not the only one that can access the public site.

            kmoorevs wrote:

            I've got a

            C Offline
            C Offline
            charlieg
            wrote on last edited by
            #5

            "Imagine going to a doctor or lawyer and expecting them to work for free because someone knows someone. Why is it devs are the only ones with not enough backbone to say "nope, not for free"? because most of us start as salary. And devs tend to be terrible at business. Hint for anyone who is contemplating going into business, learn how to ask for money. The tech stuff is easy :) I recommend watching as many of these videos as possible: Toodaloo! - YouTube[^] It's been eye opening to me.

            Charlie Gilley “They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759 Has never been more appropriate.

            enhzflepE 1 Reply Last reply
            0
            • J Jeremy Falcon

              kmoorevs wrote:

              When she tried to browse to any page for the site, html tags/code was displaying on the screen instead of being rendered. It also happened w/Edge.

              It's not strange at all. The web server was configured incorrectly and was most likely serving the document as plain text. They got the wrong mime type.

              kmoorevs wrote:

              After her friend logged off and back on, she also started getting the same thing. Meanwhile, I'm still able to browse the site, login to wp, etc. but neither of them can

              Could be a number of reasons. The most common one is you still had a cached copy of the site or vice versa. Could also be more than one server in a farm responding to the request depending on location where only one server out of N is configured incorrectly, etc.

              kmoorevs wrote:

              0: Being as annoying as possible since I really didn't want to help in the first place, and I despise long phone calls.

              There's this magical phrase called "No thanks". Try it. Unless you're romantically interested in this chick, there's no need to bend over backwards.

              kmoorevs wrote:

              1: Verifying that a cloudflare plugin is not active on their site.

              This may explain a lot. Cloudflare does MIME types and also caches. Maybe someone who didn't know what they were doing "set it up".

              kmoorevs wrote:

              3: Deleting her browser cache and trying Edge. Edge also displayed the html code.

              So it sounds like the working version is the cached version.

              kmoorevs wrote:

              The real problem is that my colleague's friend has contracted with a 'webmaster' who seems to be inept when it comes to anything dynamic such as a report involving php script and mysql.

              Yeah but that's not your problem. It's not being mean to value your time. If they want your assistance they can pay for it; otherwise, they should not be in business.

              kmoorevs wrote:

              At any rate, I have been provided with credentials to manage their WP, and as of now, I'm the only one who can actually access the site

              You mean access the backend or public site? I'm willing to bet you're not the only one that can access the public site.

              kmoorevs wrote:

              I've got a

              K Offline
              K Offline
              kmoorevs
              wrote on last edited by
              #6

              Jeremy Falcon wrote:

              You mean access the backend or public site? I'm willing to bet you're not the only one that can access the public site.

              a: I've got access to cPanel, WP, and a login for the site. I didn't want it, but I've got it. b: That was one of the most frustrating things. There was nothing wrong with the site, they were just being blocked. It's like helping your neighbor change a tire and afterwards the car won't start...it must be something you did right? It was working fine until you messed with it...makes me want to put the flat back on. :) Anyway, within a few hours the mystery error went away...and I've just seen an email from the site owner with a new list of problems. :mad: I'm still confused about the whole thing though and I hate not understanding what caused it. Here is the exact code that showed up in their browsers. There's really not too much here to search on, but maybe you can understand/decipher that east/west stuff.

              One moment, please…
              body {
              background: #F6F7F8;
              color: #303131;
              font-family: sans-serif;
              margin-top: 45vh;
              text-align: center;
              }

              Please wait while your request is being verified…

              (function(){
              var west=+((+!+[]+!![]+!![]+!![]+!![])+(+!+[]+!![]+[])+(+![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+![])+(+!+[]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),
              east=+((+!+[])+(+!+[]+!![]+[])+(+![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])),
              x=function(){try{return !!window.addEventListener;}catch(e){return !!0;} },
              y=function(y,z){x() ? document.addEventListener(“DOMContentLoaded”,y,z) : document.attachEvent(“onreadystatechange”,y);};
              y(function(){
              document.getElementById(‘wsidchk’).value = west + east;
              document.getElementById(‘wsidchk-form’).submit();
              }, false);
              })();

              "Go forth into the source" - Neal Morse "Hope is contagious"

              J 1 Reply Last reply
              0
              • K kmoorevs

                Jeremy Falcon wrote:

                You mean access the backend or public site? I'm willing to bet you're not the only one that can access the public site.

                a: I've got access to cPanel, WP, and a login for the site. I didn't want it, but I've got it. b: That was one of the most frustrating things. There was nothing wrong with the site, they were just being blocked. It's like helping your neighbor change a tire and afterwards the car won't start...it must be something you did right? It was working fine until you messed with it...makes me want to put the flat back on. :) Anyway, within a few hours the mystery error went away...and I've just seen an email from the site owner with a new list of problems. :mad: I'm still confused about the whole thing though and I hate not understanding what caused it. Here is the exact code that showed up in their browsers. There's really not too much here to search on, but maybe you can understand/decipher that east/west stuff.

                One moment, please…
                body {
                background: #F6F7F8;
                color: #303131;
                font-family: sans-serif;
                margin-top: 45vh;
                text-align: center;
                }

                Please wait while your request is being verified…

                (function(){
                var west=+((+!+[]+!![]+!![]+!![]+!![])+(+!+[]+!![]+[])+(+![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+![])+(+!+[]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![])),
                east=+((+!+[])+(+!+[]+!![]+[])+(+![])+(+!+[]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])+(+!+[]+!![]+!![]+!![]+!![])+(+!+[]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+!![]+[])),
                x=function(){try{return !!window.addEventListener;}catch(e){return !!0;} },
                y=function(y,z){x() ? document.addEventListener(“DOMContentLoaded”,y,z) : document.attachEvent(“onreadystatechange”,y);};
                y(function(){
                document.getElementById(‘wsidchk’).value = west + east;
                document.getElementById(‘wsidchk-form’).submit();
                }, false);
                })();

                "Go forth into the source" - Neal Morse "Hope is contagious"

                J Offline
                J Offline
                Jeremy Falcon
                wrote on last edited by
                #7

                kmoorevs wrote:

                Anyway, within a few hours the mystery error went away...and I've just seen an email from the site owner with a new list of problems. :mad:

                Give him a bill rate man. As long as you work for free, those requests will never stop.

                kmoorevs wrote:

                There's really not too much here to search on, but maybe you can understand/decipher that east/west stuff.

                The dev that wrote this is a rookie. He/she obfuscated poorly and in doing so made the script larger. Guessing they tried to hide an account ID that never should've been on the client to begin with. Who knows. Here's the unobfuscated version with the IIFE removed for clarity and cleaned up. There's no east variable.

                var west = 12038859;

                var x = function(callback) {
                if (window.addEventListener)
                document.addEventListener("DOMContentLoaded", callback, false);
                else
                document.attachEvent("onreadystatechange", callback);
                };

                x(function() {
                document.getElementById('wsidchk').value = west + east;
                document.getElementById('wsidchk-form').submit();
                });

                Jeremy Falcon

                1 Reply Last reply
                0
                • C charlieg

                  "Imagine going to a doctor or lawyer and expecting them to work for free because someone knows someone. Why is it devs are the only ones with not enough backbone to say "nope, not for free"? because most of us start as salary. And devs tend to be terrible at business. Hint for anyone who is contemplating going into business, learn how to ask for money. The tech stuff is easy :) I recommend watching as many of these videos as possible: Toodaloo! - YouTube[^] It's been eye opening to me.

                  Charlie Gilley “They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759 Has never been more appropriate.

                  enhzflepE Offline
                  enhzflepE Offline
                  enhzflep
                  wrote on last edited by
                  #8

                  charlieg wrote:

                  I recommend watching as many of these videos as possible: Toodaloo! - YouTube[^]

                  Ahhh, that's it - thanks a million. I bumped into a few of them the other week and laughed my backside off. Then I couldn't remember what the channel was called and since I'd been watching in incognito mode, had no history. Soon as I saw the University of North Texas mug, I knew they'd be a hoot. :laugh:

                  1 Reply Last reply
                  0
                  Reply
                  • Reply as topic
                  Log in to reply
                  • Oldest to Newest
                  • Newest to Oldest
                  • Most Votes


                  • Login

                  • Don't have an account? Register

                  • Login or register to search.
                  • First post
                    Last post
                  0
                  • Categories
                  • Recent
                  • Tags
                  • Popular
                  • World
                  • Users
                  • Groups