Site breaks when Toolset plugins are activated

This support ticket is created 5 years, 5 months ago. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

Our next available supporter will start replying to tickets in about 5.09 hours from now. Thank you for your understanding.

Sun	Mon	Tue	Wed	Thu	Fri	Sat
-	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	9:00 – 13:00	-
-	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	-

Supporter timezone: Asia/Karachi (GMT+05:00)

Tagged: Types plugin

This topic contains 5 replies, has 2 voices.

Last updated by lawrenceK 5 years, 5 months ago.

Assisted by: Waqar.

Author

Posts

June 14, 2019 at 9:34 am #1269029

lawrenceK

Site breaks whenever toolset plugins are active HTP 500 issue. All other plugins are deactivated. Site works when Toolset plugins are deactivated, doesn;t work when any Toolset plugin is active

SITE IS DOWN!! URGENT PLEASE

June 14, 2019 at 12:32 pm #1269201

lawrenceK

Here are the error logs from the server as requested:

Date Level Originating
IP Address Error Message Apache
Error Code File
Path
2019-06-14 14:15:24 Error 123.126.113.103 [client 123.126.113.103] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Sogou" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/"] [unique_id "XQOP3CnLEtsAAGrjFXkAAAA3"]
2019-06-14 14:15:23 Error 123.126.113.103 [client 123.126.113.103] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Sogou" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/robots.txt"] [unique_id "XQOP2ynLEtsAAGrjFXcAAAAC"]
2019-06-14 14:00:13 Error 180.76.15.7 [client 180.76.15.7] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Baidu" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/products.html"] [unique_id "XQOMTSnLEtsAAGrjDxMAAAAY"]
2019-06-14 13:26:53 Error 180.76.15.7 [client 180.76.15.7] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Baidu" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/images/3D_Disto_True_Stories/3d_disto _measuring_facade.pdf"] [unique_id "XQOEfSnLEtsAADNUIEAAAABA"]
2019-06-14 12:53:00 Error 95.216.1.46 [client 95.216.1.46] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/robots.txt"] [unique_id "XQN8jCnLEtsAABFR6XAAAAAr"]
2019-06-14 11:26:07 Error 78.46.149.254 [client 78.46.149.254] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/robots.txt"] [unique_id "XQNoLynLEtsAAB0fA3kAAABZ"]
2019-06-14 08:37:08 Error 193.106.30.98 [client 193.106.30.98] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n(f()' [file "/opt/modsecurity/owasp-modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n(f() found within ARGS:11yvgnqk: die(pi()*42);"] [severity "CRITICAL"] [ver "OWASP_CRS/3.1.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "pdd.co.za"] [uri "/tmp.php"] [unique_id "XQNAkynLEtsAAMVnjFYAAAAI"]
2019-06-14 08:25:30 Error 41.203.18.219 Error dispatching request to : (polling) AH01075
2019-06-14 08:10:28 Error 41.203.18.219 Error dispatching request to : (polling) AH01075
2019-06-14 07:08:01 Error 148.251.70.179 [client 148.251.70.179] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/robots.txt"] [unique_id "XQMrsSnLEtsAAMsGTbQAAAAm"]
2019-06-14 06:42:37 Error 144.76.3.79 [client 144.76.3.79] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/activated_rules/modsecurity_hetzner.conf"] [line "2"] [id "350001"] [rev "1"] [msg "BAD BOT - Detected and Rejected/Blocked."] [severity "CRITICAL"] [hostname "pdd.co.za"] [uri "/robots.txt"] [unique_id "XQMlvSnLEtsAAMsGR@oAAAAK"]

June 14, 2019 at 1:21 pm #1269281

Waqar

Hi Lawrence,

Thank you for sharing the server's error log.

I can't find any error/warning related to Toolset plugins, but they are all related to server's "ModSecurity" settings.

Can you please consult your hosting's support team, to see if there has been any change recently to the server's "ModSecurity" settings or security policy in general?

Meanwhile, I can also test your website's clone, on my own server to see if I can reproduce this on my end.

Your next reply will be private and you can share the website's clone/snapshot, as explained in this guide:
https://toolset.com/faq/provide-supporters-copy-site/

regards,
Waqar

June 17, 2019 at 5:51 am #1270207

Waqar

Hi Lawrence,

Thanks for the update and glad that the website is working now with Toolset plugins.

For the missing products, can you please deactivate the plugin "Toolset WooCommerce Views" and then check the products again?

This plugin is designed to work with WooCommerce products, but on your website, it is not being used.
( screenshot: hidden link )

In case the issue still persists, please update all plugins to their latest versions and if that doesn't work, please share clone/snapshot of the website for deeper troubleshooting.
( https://toolset.com/faq/provide-supporters-copy-site/ )

Note: your next reply will be private as well.

regards,
Waqar

June 17, 2019 at 2:31 pm #1270697

Waqar

Hi Lawrence,

Thank you for sharing the backup copy of the website.

During troubleshooting, I noticed the website's WordPress rewrite rules and/or permalinks needed to be refreshed.
( hidden link )

Re-saving the permalink settings at WP Admin -> Settings -> Permalinks, fixed the products post type on the website's clone as well as on your live website ( hidden link ).

regards,
Waqar

June 17, 2019 at 2:33 pm #1270699

lawrenceK

Waqar, you are a rockstar, thank you!! My issue is resolved now. Thank you!