Possible Hacking?

thomasarnold81

In the last 24 hours I could only load a blank page of posts, and get access to the profiles of the posters.

I'm abroad with very little access to the backend so my hosting company suggested a restore which has got us back up but with 4 days missing (but OK we are back up).

However, after the restore my config file is in debug mode and all extensions are gone.

Thoughts?

The forum is running but in very vanilla mode.

thomasarnold81

So it I can get the admin sections to load after a clear cache.

But not the dashboard. Thats blank so I can't activate my extensions.

thomasarnold81

I've upgraded to the latest.

Still no impact.

thomasarnold81

So now back to normal.

Fix was:

Restore yesterdays DB under a new name
Upgrade in the meantime to latest
Point to restored DB
Went to latest PHP
Flarum then asked me yo migrate through the front end
Dashboard came back and I had to disable and enable all extensions although I'm guessing those that didn't need DB entries worked straight away.

treyb

I ran into a similar issue last night and had to increase the memory limit in php.ini. The logs showed it was getting stuck on sycho/sourcemap. Maybe this was your issue as well?

thomasarnold81

treyb thank you.

I'll take a look but I'm really just playing around the edges here trying to keep my site up.

I'm just technical enough to get it installed.

Glad to hear I may not have been compromised.

But a config file going into debug mode?

I'm the only admin.

treyb

thomasarnold81 I am curious to see other responses on this. Mine went down as soon as I cleared cache as well. Maybe it was linked to an updated extension recently? Not sure.

[15-Apr-2025 03:32:02 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 5242880 bytes) in /home/treyb/cobbtalk.com/vendor/sycho/sourcemap/src/parsing/Line.php on line 65

clarkwinkelmann

Identifying the cause will require access to the server and its log files https://docs.flarum.org/troubleshoot

It doesn't hurt to make extra temporary backups during troubleshooting, to make it easy to go one step back instead of having to start all over, especially if you are trying to troubleshoot in the blind.

treyb

clarkwinkelmann I have noticed this now on all my sites. I am not sure what updated caused it, but whenever I clear cache on a site now it gets a 500 error and the below is in the log. I have to increase memory in php.ini to get the site to load.

This is how I upgrade everything at once:

composer upgrade

[23-Apr-2025 00:25:49 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 4096 bytes) in /home/treyb/SITE.com/vendor/sycho/sourcemap/src/parsing/SegmentParser.php on line 53

clarkwinkelmann

treyb since the OP has not shared any log so far, it's impossible to tell if your issue is the same or completely unrelated. If you need help with this, it would be best to start a separate discussion.

In your case I'd guess you had just enough memory limit to compile the javascript of all your extensions, and either by adding more extensions or the extension updates adding more javascript, you went over the limit. For forums with a very large number of extensions (or a few extensions with a lot of javascript), it might be better to use the assets cache extension and use that to compile the javascript in a scheduled task. That way the memory limit for the main HTTP request handler doesn't have to be set too high.

treyb

clarkwinkelmann Thank you for the info. I will install https://discuss.flarum.org/d/23321-cache-assets and see how it goes.