Post by stinn » Thu May 11, 2017 10:18 pm

Hello All,
Quite confused this morning so I hope someone can help. Went to bed last night with a working system and woke up this morning with a broken one. I'm getting 500 errors on the front end, the only error that logs is:

Code: Select all

Fatal error: Call to undefined method Exception::getClass() in /var/www/html/system/engine/front.php on line 61
I think this comes from the Journal Theme I have installed, which I am going to try to update, but it's been logging this error since the beginning and always worked.
In the Opencart Error log I do have a block of this from last night, related?

Code: Select all

2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 8
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 10
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 16
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 22
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 24
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 25
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 27
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 28
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 29
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 30
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 37
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 45
2017-05-10 22:59:14 - PHP Notice:  Indirect modification of overloaded property ControllerExtensionPayment::$data has no effect in /var/www/html/admin/controller/extension/payment.php on line 60
When I looked at my payment extensions this morning they were all listed as "uninstalled". I installed the two that I normally have which didn't solve anything.
The last weird thing I can report is that there was no .htaccess file in the root directory this morning, I know it was there as it always has been. I restored from a backup which didn't help.
The backend of the site works, unless I try to view an order then i get a popup with the same 500 errors.

Please help me track this down!

Newbie

Posts

Joined
Mon Feb 15, 2010 10:08 am

Post by captainmatt29 » Thu May 11, 2017 11:17 pm

I'd be more concerned about your server being potentially compromised right now as what you have described is indicative of this.

Newbie

Posts

Joined
Tue May 09, 2017 6:33 pm

Post by stinn » Thu May 11, 2017 11:27 pm

I have updated the journal theme and gotten rid of the only error I was getting.
I cannot find evidence of the server being compromised, i've checked secure logs and last logins and nothing showed up there. Anything you'd suggest I'd look for?

Newbie

Posts

Joined
Mon Feb 15, 2010 10:08 am

Post by captainmatt29 » Thu May 11, 2017 11:31 pm

Perhaps the backup restoration broke the site since you may have made changes prior or was this to try and resolve the issue ?

Newbie

Posts

Joined
Tue May 09, 2017 6:33 pm

Post by stinn » Fri May 12, 2017 1:09 am

The backup restore was to try to fix this issue. It seems a number of files have disappeared, I have contacted my VPS company to see if there are hard disk issues. This is quite concerning.

Newbie

Posts

Joined
Mon Feb 15, 2010 10:08 am

Post by stinn » Fri May 12, 2017 2:33 am

Definitely an exploit of some sort :( found malicious code.

Newbie

Posts

Joined
Mon Feb 15, 2010 10:08 am
Who is online

Users browsing this forum: No registered users and 31 guests