Update Error 3.8.12

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Update Error 3.8.12

Post by ntantaros » Mon Sep 17, 2018 7:28 pm

I'm receiving the following error. Never gotten any installation errors before. Nothing has changed internally on my website. Please help.

Could not open archive part file /hermes/walnaweb01a/b774/moo.jumperphillycom/events/tmp/ju1Ox86F for reading. Check that the file exists, is readable by the web server and is not in a directory made out of reach by chroot, open_basedir restrictions or any other restriction put in place by your host.
Last edited by toivo on Tue Sep 18, 2018 10:48 am, edited 1 time in total.
Reason: mod note: moved to 3.x Security

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44018
Joined: Sat Apr 05, 2008 9:58 pm

Re: Update Error 3.8.12

Post by Webdongle » Mon Sep 17, 2018 9:05 pm

viewtopic.php?f=714&t=793531 please
Also what version are you updating from?
http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Mon Sep 17, 2018 11:09 pm

I am updating from 3.8.11

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44018
Joined: Sat Apr 05, 2008 9:58 pm

Re: Update Error 3.8.12

Post by Webdongle » Mon Sep 17, 2018 11:13 pm

http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Tue Sep 18, 2018 1:38 am

I dont think thats the issue. I have my site scanned weekly with SiteLock and I just did another scan. Nothing came up that would make me think the site was hacked. Any other suggestions?

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44018
Joined: Sat Apr 05, 2008 9:58 pm

Re: Update Error 3.8.12

Post by Webdongle » Tue Sep 18, 2018 2:24 am

Screenshot_20180918-032313.png
Please post the fpa
You do not have the required permissions to view the files attached to this post.
http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Tue Sep 18, 2018 3:17 am

Forum Post Assistant (v1.4.3 (Frosty)) : 17th September 2018 wrote:
Basic Environment :: wrote:Joomla! Instance :: Joomla! 3.8.11-Stable (Amani) 31-July-2018
Joomla! Platform :: Joomla Platform 13.1.0-Stable (Curiosity) 24-Apr-2013
Joomla! Configured :: Yes | Read-Only (444) | Owner: --protected-- . (uid: 1/gid: 1) | Group: --protected-- (gid: 1) | Valid For: 3.8
Configuration Options :: Offline: 0 | SEF: 1 | SEF Suffix: 0 | SEF ReWrite: 0 | .htaccess/web.config: No | GZip: 0 | Cache: 0 | CacheTime: 15 | CacheHandler: file | CachePlatformPrefix: 0 | FTP Layer: 0 | Proxy: 0 | LiveSite: | Session lifetime: 15 | Session handler: database | Shared sessions: 0 | SSL: 0 | Error Reporting: default | Site Debug: 0 | Language Debug: 0 | Default Access: 1 | Unicode Slugs: 0 | dbConnection Type: mysqli | PHP Supports J! 3.8.11: Yes | Database Credentials Present: Yes |

Host Configuration :: OS: Linux | OS Version: 4.14.67 | Technology: x86_64 | Web Server: Apache | Encoding: gzip | Doc Root: --protected-- | System TMP Writable: Yes | Free Disk Space : 12615.53 GiB |

PHP Configuration :: Version: 7.1.1 | PHP API: cgi-fcgi | Session Path Writable: No | Display Errors: | Error Reporting: 24567 | Log Errors To: | Last Known Error: | Register Globals: | Magic Quotes: | Safe Mode: | Open Base: | Uploads: 1 | Max. Upload Size: 20M | Max. POST Size: 20M | Max. Input Time: 60 | Max. Execution Time: 120 | Memory Limit: 64M

Database Configuration :: Version: 5.6.37-82.2-log (Client:mysqlnd 5.0.12-dev - 20150407 - $Id: b396954eeb2d1d9ed7902b8bae237b287f21ad9e $) | Host: --protected-- (--protected--) | Localhost: No | Collation: latin1_swedish_ci (Character Set: latin1) | Database Size: 4.61 MiB | #of Tables: 87
Detailed Environment :: wrote:PHP Extensions :: Core (7.1.1) | date (7.1.1) | libxml (7.1.1) | openssl (7.1.1) | pcre (7.1.1) | sqlite3 (0.7-dev) | zlib (7.1.1) | bcmath (7.1.1) | calendar (7.1.1) | ctype (7.1.1) | curl (7.1.1) | dba (7.1.1) | dom (20031129) | hash (1.0) | fileinfo (1.0.5) | filter (7.1.1) | ftp (7.1.1) | gd (7.1.1) | gettext (7.1.1) | SPL (7.1.1) | iconv (7.1.1) | session (7.1.1) | json (1.5.0) | mbstring (7.1.1) | mcrypt (7.1.1) | standard (7.1.1) | mysqlnd (mysqlnd 5.0.12-dev - 20150407 - $Id: b396954eeb2d1d9ed7902b8bae237b287f21ad9e $) | mysqli (7.1.1) | PDO (7.1.1) | pdo_mysql (7.1.1) | pdo_sqlite (7.1.1) | Phar (2.0.2) | posix (7.1.1) | pspell (7.1.1) | Reflection (7.1.1) | imap (7.1.1) | SimpleXML (7.1.1) | sockets (7.1.1) | exif (1.4 $Id: 8bdc0c8f27c2c9dd1f7551f1f9fe3ab57a06a4b1 $) | tokenizer (7.1.1) | wddx (7.1.1) | xml (7.1.1) | xmlreader (7.1.1) | xmlrpc (7.1.1) | xmlwriter (7.1.1) | xsl (7.1.1) | zip (1.13.5) | cgi-fcgi () | Zend Engine (3.1.0) |
Potential Missing Extensions ::

Switch User Environment (Experimental) :: PHP CGI: Yes | Server SU: Yes | PHP SU: Yes | Custom SU (LiteSpeed/Cloud/Grid): Yes
Potential Ownership Issues: No
Folder Permissions :: wrote:Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) | administrator/logs/ (---) |

Elevated Permissions (First 10) ::
Database Information :: wrote:Database statistics :: Uptime: 18776041 | Threads: 13 | Questions: 6457110120 | Slow queries: 7787 | Opens: 115581928 | Flush tables: 1 | Open tables: 2000 | Queries per second avg: 343.901 |
Extensions Discovered :: wrote:Components :: SITE ::
Core :: com_mailto (3.0.0) 1 | com_wrapper (3.0.0) 1 |
3rd Party:: WF_AGGREGATOR_DAILYMOTION_TITL (2.6.16) 1 | WF_AGGREGATOR_VIMEO_TITLE (2.6.16) 1 | WF_AGGREGATOR_VINE_TITLE (2.6.16) 1 | WF_AGGREGATOR_[youtube]_TITLE (2.6.16) 1 | WF_FILESYSTEM_JOOMLA_TITLE (2.6.16) 1 | WF_LINKS_JOOMLALINKS_TITLE (2.6.16) 1 | WF_LINK_SEARCH_TITLE (2.6.16) 1 | WF_POPUPS_JCEMEDIABOX_TITLE (2.6.16) 1 | WF_POPUPS_WINDOW_TITLE (2.6.16) 1 | WF_ANCHOR_TITLE (2.6.16) 1 | WF_ARTICLE_TITLE (2.6.16) 1 | WF_AUTOSAVE_TITLE (2.6.16) 1 | WF_BROWSER_TITLE (2.6.16) 1 | WF_CLEANUP_TITLE (2.6.16) 1 | WF_CHARMAP_TITLE (2.6.16) 1 | WF_CLIPBOARD_TITLE (2.6.16) 1 | WF_CONTEXTMENU_TITLE (2.6.16) 1 | WF_DIRECTIONALITY_TITLE (2.6.16) 1 | WF_INLINEPOPUPS_TITLE (2.6.16) 1 | WF_FULLSCREEN_TITLE (2.6.16) 1 | WF_LAYER_TITLE (2.6.16) 1 | WF_IMGMANAGER_TITLE (2.6.16) 1 | WF_KITCHENSINK_TITLE (2.6.16) 1 | WF_LINK_TITLE (2.6.16) 1 | WF_LISTS_TITLE (2.6.16) 1 | WF_MEDIA_TITLE (2.6.16) 1 | WF_NONBREAKING_TITLE (2.6.16) 1 | WF_PREVIEW_TITLE (2.6.16) 1 | WF_SEARCHREPLACE_TITLE (2.6.16) 1 | WF_SOURCE_TITLE (2.6.16) 1 | WF_SPELLCHECKER_TITLE (2.6.16) 1 | WF_PRINT_TITLE (2.6.16) 1 | WF_STYLE_TITLE (2.6.16) 1 | WF_TABLE_TITLE (2.6.16) 1 | WF_TEXTCASE_TITLE (2.6.16) 1 | WF_VISUALCHARS_TITLE (2.6.16) 1 | WF_VISUALBLOCKS_TITLE (2.6.16) 1 | WF_FONTCOLOR_TITLE (2.6.16) 1 | WF_XHTMLXTRAS_TITLE (2.6.16) 1 | WF_FORMATSELECT_TITLE (2.6.16) 1 | WF_FONTSIZESELECT_TITLE (2.6.16) 1 | WF_FONTSELECT_TITLE (2.6.16) 1 | WF_STYLESELECT_TITLE (2.6.16) 1 | WF_EMOTIONS_TITLE (2.6.16) 1 | WF_HR_TITLE (2.6.16) 1 |

Components :: ADMIN ::
Core :: com_plugins (3.0.0) 1 | com_checkin (3.0.0) 1 | com_installer (3.0.0) 1 | com_newsfeeds (3.0.0) 1 | com_content (3.0.0) 1 | com_admin (3.0.0) 1 | com_media (3.0.0) 1 | com_languages (3.0.0) 1 | com_categories (3.0.0) 1 | com_templates (3.0.0) 1 | com_cpanel (3.0.0) 1 | com_joomlaupdate (3.6.2) 1 | com_banners (3.0.0) 1 | com_weblinks (3.6.0) 1 | com_messages (3.0.0) 1 | com_login (3.0.0) 1 | com_finder (3.0.0) 1 | com_redirect (3.0.0) 1 | com_menus (3.0.0) 1 | com_users (3.0.0) 1 | com_config (3.0.0) 1 | com_modules (3.0.0) 1 | com_search (3.0.0) 1 | com_ajax (3.2.0) 1 | com_cache (3.0.0) 1 | com_contenthistory (3.2.0) 1 | com_postinstall (3.2.0) 1 | com_tags (3.1.0) 1 | com_associations (3.7.0) 1 | com_fields (3.7.0) 1 |
3rd Party:: Akeeba (3.9.2) 1 | COM_JCE (2.6.16) 1 | VJ Calendar (1.5.0) 1 | Blank Component (3.0.0) 1 | ChronoForms6 (6.0.19) 1 |

Modules :: SITE ::
Core :: mod_articles_archive (3.0.0) 1 | mod_languages (3.5.0) 1 | mod_articles_category (3.0.0) 1 | mod_wrapper (3.0.0) 1 | mod_breadcrumbs (3.0.0) 1 | mod_articles_latest (3.0.0) 1 | mod_search (3.0.0) 1 | mod_weblinks (3.6.0) 1 | mod_syndicate (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_login (3.0.0) 1 | mod_stats (3.0.0) 1 | mod_whosonline (3.0.0) 1 | mod_users_latest (3.0.0) 1 | mod_banners (3.0.0) 1 | mod_articles_news (3.0.0) 1 | mod_custom (3.0.0) 1 | mod_random_image (3.0.0) 1 | mod_articles_categories (3.0.0) 1 | mod_articles_popular (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_related_items (3.0.0) 1 | mod_finder (3.0.0) 1 | mod_tags_similar (3.1.0) 1 | mod_footer (3.0.0) 1 | mod_tags_popular (3.1.0) 1 |
3rd Party:: SW Facebook Display (1.1) 1 | SW Twitter Display (1.0) 1 | Code7 Responsive Slider (2.0.6) 1 | VJ Calendar: upcoming events (1.5.0) 1 | ARI Cloud Carousel (1.7.10) 1 | ARI Cloud Carousel (1.7.10) 1 | VJ Calendar (1.5.0) 1 | Slideshow CK (1.4.50) 1 | [youtube] Widget Slider (1.0) 1 | Facebook Widget Slider (1.1) 1 | Twitter Widget Slider (1.0) 1 | Instagram Widget Slider (1.1) 1 | InstAholic Lite (3.0.5) 1 | ChronoForms6 (v6) 1 | Simple [youtube] Channel (3.0.6) 1 |

Modules :: ADMIN ::
Core :: mod_logged (3.0.0) 1 | mod_latest (3.0.0) 1 | mod_login (3.0.0) 1 | mod_submenu (3.0.0) 1 | mod_popular (3.0.0) 1 | mod_title (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_custom (3.0.0) 1 | mod_toolbar (3.0.0) 1 | mod_multilangstatus (3.0.0) 1 | mod_version (3.0.0) 1 | mod_status (3.0.0) 1 | mod_quickicon (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_stats_admin (3.0.0) 1 | mod_sampledata (3.8.0) 1 |
3rd Party::

Plugins :: SITE ::
Core :: plg_content_loadmodule (3.0.0) 1 | plg_content_pagebreak (3.0.0) 1 | plg_content_pagenavigation (3.0.0) 1 | plg_content_finder (3.0.0) 0 | plg_content_geshi (2.5.0) 0 | plg_content_emailcloak (3.0.0) 1 | plg_content_vote (3.0.0) 1 | plg_content_joomla (3.0.0) 1 | plg_content_fields (3.7.0) 1 | plg_captcha_recaptcha (3.4.0) 1 | plg_user_contactcreator (3.0.0) 0 | plg_user_profile (3.0.0) 0 | plg_user_joomla (3.0.0) 1 | plg_finder_weblinks (3.6.0) 1 | plg_finder_categories (3.0.0) 1 | plg_finder_contacts (3.0.0) 1 | plg_finder_newsfeeds (3.0.0) 1 | plg_finder_content (3.0.0) 1 | plg_finder_tags (3.0.0) 1 | plg_authentication_ldap (3.0.0) 0 | plg_authentication_gmail (3.0.0) 0 | plg_authentication_cookie (3.0.0) 1 | plg_authentication_joomla (3.0.0) 1 | plg_extension_joomla (3.0.0) 1 | plg_editors-xtd_image (3.0.0) 1 | plg_editors-xtd_readmore (3.0.0) 1 | plg_editors-xtd_article (3.0.0) 1 | plg_editors-xtd_module (3.5.0) 1 | plg_editors-xtd_pagebreak (3.0.0) 1 | plg_editors-xtd_menu (3.7.0) 1 | plg_editors-xtd_fields (3.7.0) 1 | plg_system_remember (3.0.0) 1 | plg_system_highlight (3.0.0) 1 | plg_system_debug (3.0.0) 1 | plg_system_languagefilter (3.0.0) 0 | plg_system_p3p (3.0.0) 1 | plg_system_cache (3.0.0) 0 | plg_system_logout (3.0.0) 1 | plg_system_languagecode (3.0.0) 0 | plg_system_sef (3.0.0) 1 | plg_system_log (3.0.0) 1 | plg_system_redirect (3.0.0) 1 | plg_system_stats (3.5.0) 1 | plg_system_updatenotification (3.5.0) 1 | plg_system_fields (3.7.0) 1 | plg_system_sessiongc (3.8.6) 1 | plg_search_categories (3.0.0) 1 | plg_search_content (3.0.0) 1 | plg_search_tags (3.0.0) 0 | plg_search_contacts (3.0.0) 1 | plg_search_weblinks (3.6.0) 1 | plg_search_newsfeeds (3.0.0) 1 | plg_quickicon_phpversioncheck (3.7.0) 1 | plg_quickicon_extensionupdate (3.0.0) 1 | plg_quickicon_joomlaupdate (3.0.0) 1 | plg_twofactorauth_yubikey (3.2.0) 1 | plg_twofactorauth_totp (3.2.0) 1 | plg_installer_webinstaller (1.1.1) 1 | PLG_INSTALLER_FOLDERINSTALLER (3.6.0) 1 | PLG_INSTALLER_URLINSTALLER (3.6.0) 1 | plg_installer_packageinstaller (3.6.0) 1 | plg_fields_calendar (3.7.0) 1 | plg_fields_checkboxes (3.7.0) 1 | plg_fields_color (3.7.0) 1 | plg_fields_integer (3.7.0) 1 | plg_fields_editor (3.7.0) 1 | plg_fields_imagelist (3.7.0) 1 | plg_fields_list (3.7.0) 1 | plg_fields_media (3.7.0) 1 | plg_fields_radio (3.7.0) 1 | plg_fields_text (3.7.0) 1 | plg_fields_textarea (3.7.0) 1 | plg_fields_sql (3.7.0) 1 | plg_fields_user (3.7.0) 1 | plg_fields_url (3.7.0) 1 | plg_fields_usergrouplist (3.7.0) 1 |
3rd Party:: myFlickr - Content Plugin (2.0.5) 1 | AllVideos (by JoomlaWorks) (4.8.0) 1 | AllVideos (by JoomlaWorks) (4.8.0) 1 | plg_content_jce (2.6.16) 1 | plg_editors_jce (2.6.16) 1 | plg_editors_codemirror (5.38.0) 1 | plg_editors_tinymce (4.5.8) 1 | plg_extension_jce (2.6.16) 1 | Search - JTAG Calendar (2.0.8) 1 | plg_system_jce (2.6.16) 1 | ChronoengineGcore2 (1.0) 1 | plg_system_dpcalendar (4.2.8) 1 | plg_search_dpcalendar (4.2.8) 1 | plg_quickicon_jce (2.6.0-pro-bet) 1 | plg_installer_jce (2.6.16) 1 |
Templates Discovered :: wrote:Templates :: SITE :: beez_20 (2.5.0) 1 | atomic (2.5.0) 1 | beez5 (2.5.0) 1 | protostar (1.0) 1 | beez3 (3.1.0) 1 | jp-musician (1.0.001) 1 |
Templates :: ADMIN :: bluestork (2.5.0) 1 | hathor (3.0.0) 1 | isis (1.0) 1 |
Last edited by toivo on Tue Sep 18, 2018 10:41 am, edited 1 time in total.
Reason: mod note: disabled smilies in post Options for readability

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20651
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Update Error 3.8.12

Post by leolam » Tue Sep 18, 2018 5:05 am

Webdongle is right you have been hacked so dump Sitelock... Proofs they are useless. Is your twitter-widget suppose to link to Michelin Australia? That thing is hacked and whacked

Code: Select all

Tweets by @JumperPhilly</a><div style="font-size: 9px; color: #808080; font-weight: normal; font-family: tahoma,verdana,arial,sans-serif; line-height: 1.28; text-align: right; direction: ltr;"><a href="http:// www.michelin.com.au" target="_blank" 
Part of the code and I broke the link

Start with removing the Twitter widget causing this. However that does not guarantee that the hack is only 'using' the plugin but the actual code can be located elsewhere. If it shows up in online scanners again after you remove that widget you will need to cleans your site completely as outlined viewtopic.php?f=714&t=946026

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Tue Sep 18, 2018 5:14 am

Thank you both. I will try this tomorrow and see if it does the trick.

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Tue Sep 18, 2018 5:31 am

So I got rid of the widget, rescanned the site check and all looks well on that front. I am still getting the original Error message. Any other suggestions?

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44018
Joined: Sat Apr 05, 2008 9:58 pm

Re: Update Error 3.8.12

Post by Webdongle » Tue Sep 18, 2018 10:39 am

Remove all the suspect extensions (as advised by Leo) then see viewtopic.php?f=714&t=946026. Step #f will make sure you have the latest 3rd party extensions.
http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".

ntantaros
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Fri Oct 04, 2013 6:59 pm

Re: Update Error 3.8.12

Post by ntantaros » Tue Sep 18, 2018 8:11 pm

Should this be of a concern?

The PHP temporary folder is not set.
The PHP temporary folder is the folder that PHP uses to store an uploaded file before Joomla can access this file. Whilst the folder not being set isn't always a problem, if you are having issues with manifest files not being detected or uploaded files not being detected, setting this in your php.ini file might fix the issue.

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 44018
Joined: Sat Apr 05, 2008 9:58 pm

Re: Update Error 3.8.12

Post by Webdongle » Tue Sep 18, 2018 8:27 pm

@ntantaros
Yes but the most important thing at the moment is that your site is hacked and has old extensions.
http://www.weblinksonline.co.uk/
https://www.weblinksonline.co.uk/updating-joomla.html
"When I'm right no one remembers but when I'm wrong no one forgets".

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2619
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Update Error 3.8.12

Post by JAVesey » Tue Sep 18, 2018 9:40 pm

Webdongle wrote:
Tue Sep 18, 2018 8:27 pm
@ntantaros
Yes but the most important thing at the moment is that your site is hacked and has old extensions.
...and old templates from old J2.x times.

Your site needs a darned good spring-clean in addition to de-hackifying.
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28


Locked

Return to “Security in Joomla! 3.x”