Topic: Stopped Updating

[JupiterJoe]

Yesterday, my site stopped updating and I can see that it is uploading to the website with no issues. I contacted my webhost and they said :

Hello Robert,

Thank you for contacting DreamHost!

Looking over the site, I do see that it looks "stuck" on Updated:
02/15/2024 @ 7:53:09 pm. Checking the logs, I do see FTP connections
uploading and overwriting the .php files today, last one looks to be
around 9am PST? So there are updates going on on the live files. What I'm
also seeing are thousands of modsec PCRE redirect errors:

[Fri Feb 16 13:03:50.840151 2024] [:error] [pid 1299444:tid
140250630297344] [client 98.254.150.184:54836] [client 98.254.150.184]
ModSecurity: Rule 7f9078298e78 [id "942360"][file
"/etc/modsecurity/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line
"444"] - Execution error - PCRE limits exceeded (-8): (null). [hostname
"www.joe4speed.com"] [uri "/pwsWD/w34_WDapi.php"] [unique_id
"Zc-NtmJGIxjICYN8s-35fgAAJ2M"]
[Fri Feb 16 13:03:54.005434 2024] [:error] [pid 1299444:tid
140250638690048] [client 98.254.150.184:54841] [client 98.254.150.184]
ModSecurity: Rule 7f9078298e78 [id "942360"][file
"/etc/modsecurity/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line
"444"] - Execution error - PCRE limits exceeded (-8): (null). [hostname
"www.joe4speed.com"] [uri "/pwsWD/w34_WDapi.php"] [unique_id
"Zc-NuWJGIxjICYN8s-35gAAAJ2I"]
[Fri Feb 16 13:03:56.830805 2024] [:error] [pid 1299444:tid
140246377293568] [client 98.254.150.184:54843] [client 98.254.150.184]
ModSecurity: Rule 7f9078298e78 [id "942360"][file
"/etc/modsecurity/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line
"444"] - Execution error - PCRE limits exceeded (-8): (null). [hostname
"www.joe4speed.com"] [uri "/pwsWD/w34_WDapi.php"] [unique_id
"Zc-NvGJGIxjICYN8s-35hAAAJ5Y"]

iad1-shared-b8-28:/home/robleh6/joe4speed.com# grep "[id "942360"]"
../logs/joe4speed.com/https/error.log |wc -l
11899

Not sure what this api file is attempting to do, but the modsecurity
service on the new server is logging 10k plus errors as a PCRE error
(Perl Compatible Regular Expression) Typically this means something is
looping internally too much, and it gets flagged as malicious.

I've set up an exception for the PCRE flag, though I'm not seeing it
updated still. I haven't seen an upload since the exception was made, and
I'm afraid I'm not versed in how a site like this functions. If it's
still having issues, you may want to look at how the coding is generating
the page and how it's reading the pages, it may be something no longer
compatible with the the new Apache 2.4 service that's serving the site.
All I can say is that the error.log isn't reporting any more PCRE limit
issues.

Thanks,
Hoffman
The DreamHost Tech Support Team

So I'm wondering if something happened with the php of the site yesterday. Can anyone take a look and shoot out some advice? Thank you so much!
https://www.joe4speed.com/wxindex.php

[saratogaWX]

your wxstatus.php shows that you're not FTP updating your site.  Check the weather-display FTP log for clues.

[JupiterJoe]

Hmmm, the log shows everything is uploading with no errors. This is strange.
Anywhere else I should look?

[saratogaWX]

maybe the destination for the WD files is not your document root directory.  testtags.php?sce=view in your document root shows

Code: [Select]

$time =  '7:50 PM'; // current time
$date =  '2/15/2024'; // current date
as the last update time.

Is your default destinition in the ftp settings set to /home/robleh6/joe4speed.com ?

Such as setting joe4speed.com/ as the target directory for ftp?

[JupiterJoe]

When I set it to /home/robleh6/joe4speed.com, it gives a no such file or directory error 550.
I don't know what could have happened, I touched nothing for at least a month or maybe longer. This is out of the blue.

[JupiterJoe]

The tech guy says he sees the files updating on the website, but seemingly the page wont update them. It's like the updates aren't being seen by the script even though they're there.

[saratogaWX]

The template shows that your document root is /home/robleh6/joe4speed.com . Using your FTP client, do you see updates to testtags.php (and clientraw.txt) in that directory, or is there a www or public_html directory shown in /home/robleh6/joe4speed.com ?
or do you see testtags.php and clientraw.txt in /home/robleh6 directory?

[JupiterJoe]

Using the ftp client, I see that it is not updating even though I can see that the ftp client says successful transfer. If I manually upload a random picture, it will work. However, Nexstorm and my webcam static pictures will not update, and both of those programs show no error uploading.
https://www.joe4speed.com/nexstorm.jpg
https://www.joe4speed.com/ajax-images/cam_1.jpg?rand=798

This is really bizarre. Manually updating with my ftp client works. I think WD handles all the weather ftp, yet the logs in WD insist that these files are being uploaded successfully.

[JupiterJoe]

Real time clientraw ftp in WD is running and successful every run.

[JupiterJoe]

I use Netcam Studio and it shows that it's uploading successfully, but that picture isn't updating either.

[saratogaWX]

So it sound like the FTP is going someplace, just not to the document root of your website .. time to contact the hoster's tech support and have them verify the full path to the document root of your website.

[JupiterJoe]

So, it’s resolved now. The hosting company changed the ftp server address. They said they contacted me, but I never got the email, maybe the junk folder got it.
Still strange that all of the logs stated that the uploads were successful and no errors were listed.
Thank you for all of your help, Ken.

[hcorrin]

Although they change your ftp server to a new one the old ftp server was probably still running for those client not changed over yet
The Webserver would have been told to except data from the new ftp server rather than the old one hence your observations
I see you need to update your nws advisory files there is another thread on that