Flarum encountered a boot error.

boohoo

I installed Flarum only to experience a multi-stage collapse. I set up the site and added some posts and then started to add some extensions. I think...when I added the SEO extension the bulletin board screen changed to a message about upgrading (?) and a textbox.

Then I added CodeGuard, which backs up files, and due to this or not due to this the screen now says, "Flarum encountered a boot error. Details have been logged to the Flarum log file."

Next Doctrine\DBAL\Driver\PDO\Exception: SQLSTATE[HY000] [1045] Access denied for user 'aaa_ccc'@'localhost' (using password: YES) in /home2/aaa/public_html/bbbdb/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDO/Exception.php:18 Stack trace: #0 /home2/aaa/public_html/bbbdb/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnection.php(44): Doctrine\DBAL\Driver\PDO\Exception::new(Object(PDOException)) #1 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connectors/Connector.php(67): Doctrine\DBAL\Driver\PDOConnection->__construct('mysql:host=loca...', 'aaa_flar28...', '9Ei[63)pYS', Array) #2 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connectors/Connector.php(45): Illuminate\Database\Connectors\Connector->createPdoConnection('mysql:host=loca...', 'aaa_flar28...', '9Ei[63)pYS', Array) #3 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connectors/MySqlConnector.php(24): Illuminate\Database\Connectors\Connector->createConnection('mysql:host=loca...', Array, Array) #4 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connectors/ConnectionFactory.php(184): Illuminate\Database\Connectors\MySqlConnector->connect(Array) #5 [internal function]: Illuminate\Database\Connectors\ConnectionFactory->Illuminate\Database\Connectors\{closure}() #6 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connection.php(1064): call_user_func(Object(Closure)) #7 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connection.php(1014): Illuminate\Database\Connection->getPdo() #8 /home2/aaa/public_html/bbbdb/vendor/illuminate/database/Connection.php(994): Illuminate\Database\Connection->getDoctrineConnection() #9 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Database/Migrator.php(69): Illuminate\Database\Connection->getDoctrineSchemaManager() #10 [internal function]: Flarum\Database\Migrator->__construct(Object(Flarum\Database\DatabaseMigrationRepository), Object(Illuminate\Database\MySqlConnection), Object(Illuminate\Filesystem\Filesystem)) #11 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(917): ReflectionClass->newInstanceArgs(Array) #12 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(758): Illuminate\Container\Container->build('Flarum\\Database...') #13 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(694): Illuminate\Container\Container->resolve('Flarum\\Database...', Array) #14 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(1027): Illuminate\Container\Container->make('Flarum\\Database...') #15 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(947): Illuminate\Container\Container->resolveClass(Object(ReflectionParameter)) #16 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(908): Illuminate\Container\Container->resolveDependencies(Array) #17 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(292): Illuminate\Container\Container->build('Flarum\\Extensio...') #18 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(873): Illuminate\Container\Container->Illuminate\Container\{closure}(Object(Illuminate\Container\Container), Array) #19 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(758): Illuminate\Container\Container->build(Object(Closure)) #20 /home2/aaa/public_html/bbbdb/vendor/illuminate/container/Container.php(694): Illuminate\Container\Container->resolve('Flarum\\Extensio...', Array) #21 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Extension/ExtensionServiceProvider.php(31): Illuminate\Container\Container->make('flarum.extensio...') #22 [internal function]: Flarum\Extension\ExtensionServiceProvider->Flarum\Extension\{closure}(Object(Flarum\Foundation\Application)) #23 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Foundation/Application.php(329): call_user_func(Object(Closure), Object(Flarum\Foundation\Application)) #24 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Foundation/Application.php(270): Flarum\Foundation\Application->fireAppCallbacks(Array) #25 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Foundation/InstalledSite.php(151): Flarum\Foundation\Application->boot() #26 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Foundation/InstalledSite.php(82): Flarum\Foundation\InstalledSite->bootLaravel() #27 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Http/Server.php(59): Flarum\Foundation\InstalledSite->bootApp() #28 /home2/aaa/public_html/bbbdb/vendor/flarum/core/src/Http/Server.php(36): Flarum\Http\Server->safelyBootAndGetHandler() #29 /home2/aaa/public_html/bbbdb/public/index.php(26): Flarum\Http\Server->listen() #30 {main} aaa@eee [~/public_html/bbbdb/storage/logs]#

The SQLSTATE[HY000] [1045] error is a MySQL authentication error, indicating that the server denied access for the specified user. It is typically caused by incorrect credentials, insufficient privileges, or a misconfigured host.

In cPanel I have some usernames for the mySQL database. However, I can't view their passwords. Where would I change something to fix this error? I thought the error message might just be from me trying to ssh in and using the wrong password.

KBExit

boohoo your MySQL authentication was rejected. Either bad password, bad username, both, or you boogered your MySQL address. You'd have to thoroughly investigate it. I don't use cPanel so I wouldn't know how to help you in regards to that

Edit: you most likely updated Flarum Framework when you installed extensions via package manager. When this happens, you need to conduct a database migration, which asks for your password. You must input the correct database password to complete the upgrade. Otherwise you're stuck.
If you have SSH, go to the Flarum directory and run php Flarum migrate and report back what happens.

GreXXL

KBExit adding to what KBExit already has written you can change your database settings in you config.php. It's most likely that your credentials are set wrong.

boohoo

I am not understanding. Where do you enter your mySQL username and password? As far as I know, I never touched either before this happened. I am not sure how to fix an authentication problem.

I should fix my config.php file?

KBExit

boohoo we unfortunately cannot tell what's going on in your infrastructure, what happened on your end, or anything.
You said you installed Flarum and had an extension installed before all of this happened.
As I've mentioned, go to your Flarum root directory and run php flarum migrate and report back if that fixes the issue or not.

boohoo

I went to the folder where the flarum file was in using ssh. From within this folder, I typed "php flarum migrate." No text response, just a new line with the same prompt. Didn't fix anything.
Now I am going to config.php.

boohoo

I went to config.php, saw what the password was, and changed the username's password to that password. It worked, and I had the password for migration. Thanks everybody!

boohoo

Visit my babysite, brainchildforum.com. I'm trying to make it into an intellectual hotspot of original thought. I also need to convince people to go there. Oh me oh my. Desolate now.

Is there any crosspolination here? I'll post on your site if you post on mine?

KBExit

boohoo your Flarum is exposing the /public directory which is exposing vulnerable files. You need this remedied asap.

boohoo

I did chmod 755 public/. How do I know if that helped? I altered config.php to 'url' => 'https://brainchildforum.com' from 'url' => 'https://brainchildforum.com/public' and got the error message "The page you requested could not be found. Return to Brainchild Forum" so I changed it back, but I don't know why this site doesn't have a "public" extension in the url if it default adds it when installing flarum.

KBExit

I can't see your reply @boohoo

clarkwinkelmann

KBExit the message was awaiting moderation because of the links it contains.

boohoo there are 2 options to deal with the "public" path.

Either set the webroot to the public path in your Apache/nginx configuration, as instructed during the installation steps https://docs.flarum.org/install/#installing-using-the-command-line-interface It's best to do it before running the installation wizard, but if you do it now there's just the extra step of editing config.php to change the URL after Apache/nginx has been modified. That's what I call the "Laravel-style" installation.

Or if you want to remove the public folder completely to install "Wordpress-style", the instructions are here https://docs.flarum.org/install/#customizing-paths

KBExit

boohoo alternative to what @clarkwinkelmann mentioned, and I've done it in the past when I first started Flarum.

Change it back to without /public in your Flarum Configurations and point your ROOT Directory to /public.
This should be a simple remedy.

Did you install Flarum via Softaculous?

boohoo

KBExit

Yes. Also, looking at Customizing Paths in FLARUM docs, I have public_html, and this site is off of another site who has the hosting plan. My flarum website is off a cryptic folder of public_html that shows up as my fun url.

However, if you wish to host Flarum in a subdirectory (like yoursite.com/forum), or if your host doesn't give you control over your webroot (you're stuck with something like public_html or htdocs), you can set up Flarum without the public directory.

I guess I can't eliminate /public, or am I missing the point?

Simply move all the files inside the public directory (including .htaccess) into the directory you want to serve Flarum from. Then edit .htaccess and uncomment lines 9-15 in order to protect sensitive resources. For Nginx, uncomment lines 8-11 of .nginx.conf.

Does that make the website folder really messy - disorganized? Also, I would be saving over .htaccess but I will see if it is the same.

KBExit

boohoo that's your first problem right there. I have told the team over at Softaculous several times that their method of installing Flarum is dangerous. They said they would remedy it, but it's clear that they haven't done so at all.
I advise you to install Flarum via the documentation or find a managed host.
It's critical that you do not expose the /public directory at all and I am concerned if you keep using Softaculous, future updates will cause more issues down the line for you.

boohoo

KBExit

This is all above my experience. What do you mean expose the /public directory? I assigned the chmod for it, and I'm trying to remove /public from my url. It seems that it just installed flarum into a folder off my public_html (main url). Do you mean the folders and files are incorrect?

I think the boot problem was I saved over my mySQL password and changed it back, and I needed to update something else with my password. I don't get exactly what exposing /public files is. I also just assigned a ****load of FontAwesome icons to categories, and I don't want to go back unless necessary.

KBExit

boohoo

Insecure public folder

It appears you didn't complete the path customization to use Flarum without a public folder. This leaves all Flarum sensitive files unprotected. Update your webserver root to point to the public folder or complete the instructions to remove the public folder and use the suggested rewrite rules to restrict access to the files instead.

Vendor folder

Your vendor folder is currently being served by your webserver. This could expose untrusted scripts to the world and compromise your security.

Storage folder

Your storage folder is currently being served by your webserver. This could expose private data (including access tokens) and compromise your security.

Composer files

Your Composer files are currently being served by your webserver. This could expose advanced information about your server configuration and installed packages.

Before we move any further. Please confirm: Are you using Softaculous to manage your Flarum Installation?

boohoo

KBExit

Yes, I used it to install and didn't touch Softaculous again because I think that's all it did.

KBExit

boohoo take a backup of the following files:
composer.json
config.php
extend.php
and your assets folder.
Create a backup of your MySQL Database via SQL Dump.
Download these files.

Delete your Softaculous Installation entirely.

SSH Using Terminal and go to your root directory, run the Flarum Installation Command.
composer create-project flarum/flarum:^1.8.0 .
Change the document root from public_html to public_html/public
Go to your website, complete the Installation Wizard.
Upload and override those files in the Flarum Directory, upload your SQL Dump to your database to recover your website details, and run composer update in your Flarum Directory.

It is critical we detach Softaculous Entirely so it doesn't brick your website with future updates.
It is also critical that we fix the exposure of /public directory so your vulnerable files are not accessible to the browser.

If you don't want to take my word for it: https://lab.migratetoflarum.com/scans/06d008ec-0fea-494f-a0dd-92a2b725310b

boohoo

I took it down, but why can't I use one of the path customization options? Some of these things take a lot of time. I'm working on it tomorrow.

I think I can copy it in cpanel, trash it in Softaculous, and move it back to where it was and do the url configuration stuff.