Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED admin-ajax.php stopped working on all WP sites after update

Discussion in 'General Discussion' started by Volkinson, Aug 9, 2018.

  1. Volkinson

    Volkinson Member

    Joined:
    Aug 9, 2018
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Hello.
    I have this issue, that after i updated cPanel, i have issue with admin-ajax.php files. It is forbidden to access them and it is not possible to login for users.
    Does anybody had similar issue and how it is possible to fix that? I already raised memory limit for user's and etc. Nothing helps.
    I will appreciate any clue how to solve that issue. Thanks in advance!

    Best regards,
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @Volkinson,

    Can you let us know the output to the Apache error log (/usr/local/apache/logs/error_log) upon accessing that file and seeing the 403 error code in your web browser?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Volkinson

    Volkinson Member

    Joined:
    Aug 9, 2018
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Hello, Michael.
    Here is output from Apache error log. Btw, error is not 403, but 500.
    Code:
    [Fri Aug 10 09:09:19.389795 2018] [cgi:error] [pid 7855] [client 110.232.84.253:57252] AH01215: PHP Fatal error:  Allowed memory size of 134217728 bytes exhausted (tried to allocate 12288 bytes) in /home/volkinso/public_html/wp-admin/in$
    [Fri Aug 10 09:19:44.027366 2018] [:error] [pid 7853] [client 186.50.31.71:44531] [client 186.50.31.71] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUES$
    [Fri Aug 10 09:19:58.612648 2018] [core:crit] [pid 7805] (13)Permission denied: [client 185.53.91.26:43472] AH00529: /home/eihqpjfb/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/hom$
    [Fri Aug 10 09:19:58.661222 2018] [core:crit] [pid 7833] (13)Permission denied: [client 185.53.91.26:43502] AH00529: /home/eihqpjfb/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/hom$
    [Fri Aug 10 09:37:02.137209 2018] [:error] [pid 7853] [client 46.101.112.78:41044] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "lab$
    [Fri Aug 10 09:37:02.138557 2018] [:error] [pid 7853] [client 46.101.112.78:41044] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "lab.svk$
    [Fri Aug 10 10:25:02.060712 2018] [:error] [pid 7855] [client 46.101.112.78:41600] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "crm$
    [Fri Aug 10 10:25:02.061179 2018] [:error] [pid 7855] [client 46.101.112.78:41600] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "crm.svk$
    [Fri Aug 10 10:37:48.156888 2018] [:error] [pid 7805] [client 46.101.112.78:41738] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "est$
    [Fri Aug 10 10:37:48.156929 2018] [:error] [pid 7805] [client 46.101.112.78:41738] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "estatea$
    [Fri Aug 10 10:52:02.421394 2018] [:error] [pid 7855] [client 46.101.112.78:41900] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "lab$
    [Fri Aug 10 10:52:02.421445 2018] [:error] [pid 7855] [client 46.101.112.78:41900] [client 46.101.112.78] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "lab.svk$
    [Fri Aug 10 10:59:48.342272 2018] [:error] [pid 7853] [client 66.249.66.211:54274] [client 66.249.66.211] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "est$
    [Fri Aug 10 10:59:48.343181 2018] [:error] [pid 7853] [client 66.249.66.211:54274] [client 66.249.66.211] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "estatea$
    [Fri Aug 10 11:00:29.050963 2018] [:error] [pid 7855] [client 91.126.134.2:29537] [client 91.126.134.2] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/global": Permission denied [hostname "svkpr$
    [Fri Aug 10 11:00:29.051325 2018] [:error] [pid 7855] [client 91.126.134.2:29537] [client 91.126.134.2] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ip": Permission denied [hostname "svkpro.co$
    As you can see, no records about example.com
    I have issues with sites domain.es and example.com
    On domain.es issue is solved with Cache plugin, i think, that this will solve also on example.com, but it is not an solution.
    Screenshot from Chrome browser:
    cpanel_modsecurity_issue.PNG
    Just in case: - Removed -
    Thanks in advance!

    Best regards,
    Artur
     
    #3 Volkinson, Aug 10, 2018
    Last edited by a moderator: Aug 10, 2018
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @Volkinson,

    The time stamps in the log output you provided look to range over a couple of hours and don't point to a specific reason for the 500 internal error code. Can you verify if the affected domains PHP-FPM? If so, can you review the account's PHP-FPM error log (/home/username/logs/domain_com.php.error.log) when reproducing the issue to see if anything shows up?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Volkinson

    Volkinson Member

    Joined:
    Aug 9, 2018
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Hello
    I copied logs for 10 august for all evening.
    I tried to input them here, but xenforo don't let me do that. I pasted all to pastebin
    Here is link:
    [removed]
    There is 10 records about admin-ajax and i don't see how it is related with a problem.
    Thanks in advance!
     
    #5 Volkinson, Aug 14, 2018
    Last edited by a moderator: Aug 14, 2018
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    It looks like the PHP memory limit was met on the account. If this domain uses PHP-FPM, please see the following guide for information on how to adjust the php.ini directives (e.g. memory_limit):

    Tutorial - Managing php.ini directives with PHP-FPM

    Let me know if the issue persists after increasing the PHP memory limit.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    linux4me2 likes this.
  7. Volkinson

    Volkinson Member

    Joined:
    Aug 9, 2018
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Hello.
    Nope, i turned on FPM for all sites, memory_limit is totally okay. Previously was 99mb. Changed to 128. I think, that something wrong here is with Mod_security. I will dig more into that direction. Thanks in advance!
     
  8. Volkinson

    Volkinson Member

    Joined:
    Aug 9, 2018
    Messages:
    5
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Hello. I found, what was causing that issue. In plugin Akismet there is new feature about eu cookie protection. I just removed Akismet plugin and now everything works. I spent a lot of coffee and time to search that sneaky thing. I found modsec log. Path to that folder /home/virtfs/ and thenyour domainname/etc/apache2/logs/modsec_audit/
    I hope, that this information will be useful for somebody.
    Thanks for your support.

    Best regards,
    Artur
     
    linux4me2 and cPanelMichael like this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice