Web Hosting
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WordPress fix Media Library – Unusual Error

Discussion in 'Misc WordPress Requests' started by jvmedia, Oct 10, 2017.

  1. jvmedia

    Guest

    Media Library – Unusual Error, by jvmedia

    Our client informed us Monday that he was no longer able to upload images to the media gallery. We logged in and checked it out. Here is what happens:

    • Try to upload image – gets up to 100% upload and goes into “crunching”, gets stuck
    • If you back out to media Gallery, it has a gray document style icon and names it: (no title) – Logo. Does not actually link through to anywhere and doesn’t even show the usual checkbox to delete it (so we’ve got pages of these in there now from testing).

    When we check the uploads folder in the FTP, we see that it did actually upload the image and it’s not corrupt (we can download it and open it up just fine). So not a permissions issue on the uploads folder.

    On Chrome console we see the following error:
    POST https://michaelpaulonline.com/wp-admin/async-upload.php 403 (Forbidden)

    Things we’ve already tried to troubleshoot:

    • The usual turn off all plugins and turn them all on one by one (did nothing)
    • Try a different theme (did nothing)
    • Tried deleting all WordPress files (except wp-content folder) and uploading fresh files (did nothing)
    • Make sure the async-upload.php file has the proper permissions (did nothing)
    • Scan for malware and hacks (found 2 malware files in a plugin which we cleaned up and then deleted that plugin)
    • Checked the error log and turned on debug log (had things like: [Mon Oct 09 20:00:12.273051 2017] [:error] [pid 111392] [client 96.41.168.183:57159] SoftException in Application.cpp:256: File “/home/michaelp/public_html/wp-admin/async-upload.php” is writeable by group, referer: https://michaelpaulonline.com/wp-admin/media-new.php
      [Mon Oct 09 20:00:12.273105 2017] [core:error] [pid 111392] [client 96.41.168.183:57159] End of script output before headers: async-upload.php, referer: https://michaelpaulonline.com/wp-admin/media-new.php
      [Mon Oct 09 20:07:49.262995 2017] [:error] [pid 117052] [client 96.41.168.183] ModSecurity: Access denied with redirection to http://michaelpaulonline.com/ using status 302 (phase 4). Pattern match “^5\\d{2}$” at RESPONSE_STATUS. [file “/usr/local/apache/conf/modsec_vendor_configs/OWASP/rules/RESPONSE-50-DATA-LEAKAGES.conf”] [line “14”] [id “970901”] [rev “3”] [msg “The Application Returned a 500-Level Status Code”] [data “Matched Data: 500 found within RESPONSE_STATUS: 500”] [severity “ERROR”] [ver “OWASP_CRS/3.0.0”] [maturity “9”] [accuracy “9”] [tag “Host: michaelpaulonline.com”] [tag “application-multi”] [tag “language-multi”] [tag “platform-multi”] [tag “attack-information disclosure”] [tag “WASCTC/WASC-13”] [tag “OWASP_TOP_10/A6”] [tag “PCI/6.5.6”] [hostname “michaelpaulonline.com”] [uri “/wp-admin/async-upload.php”] [unique_id “Wdw5hUpV9XkAAck8CBgAAAAA”]
      [Mon Oct 09 20:07:49.263295 2017] [:error] [pid 117052] [client 96.41.168.183] ModSecurity: Warning. Operator GE matched 0 at TX:eek:utbound_anomaly_score. [file “/usr/local/apache/conf/modsec_vendor_configs/OWASP/rules/RESPONSE-80-CORRELATION.conf”] [line “37”] [id “981205”] [msg “Outbound Anomaly Score Exceeded (score 0): The Application Returned a 500-Level Status Code”] [tag “Host: michaelpaulonline.com”] [tag “event-correlation”] [hostname “michaelpaulonline.com”] [uri “/wp-admin/async-upload.php”] [unique_id “Wdw5hUpV9XkAAck8CBgAAAAA”]) – deciphering most errors like this aren’t really in my wheelhouse …
    • Contacted the web host and explained the situation. All they’ve done so far is point out the error log

    We’ve been using WordPress for about 10 years now and haven’t encountered this particular error. Nothing really shows up in Google with this problem either (nothing that had a resolution at least). So just posting here in case anyone else has ran into this one in the wild.

    Thanks in advance.

    Media Library – Unusual Error
     
    #1

Share This Page

Web Hosting