I think I just ran into a similar issue with the latest version. Had to remove the plugin at command line to get site running again. From the nginx log:
2018/12/10 16:46:24 [error] 1116#1116: *5644 FastCGI sent in stderr: “PHP message: PHP Notice: Undefined offset: -1 in /var/www/html/wp-content/plugins/wp-optimize/js/rpqceify.php(2) : eval()’d code on line 270” while reading response header from upstream, client: 162.158.2.189, server: mydomain.com, request: “POST /wp-content/plugins/wp-optimize/js/rpqceify.php HTTP/1.1”, upstream: “fastcgi://unix:/run/php/php7.2-fpm.sock:”, host: “mydomain.com”, referrer: “http://mydomain.com/wp-content/plugins/wp-optimize/js/rpqceify.php”
@nepalpyramids
Hi, can you please check/update the permalinks on your site ? Are you using some sort of cache plugin or CDN alongside WPO ? Finally what happens if you deactivate the plugin, does the issue with Gravity go away ?
@scollonp
I don’t see the file you mention in that specific folder, could it be something else ? Also I see mention of code that was eval()d, is it possible that the code could have been tampered with ? If that’s not the case, please could you open a separate thread here and we’ll investigate right away
On further inspection, rpqceify.php has a different time stmap than everything else. I think you are right, this was injected into the site! I’ll check my security logs and reinstall the plugin. Thank you. (Sorry @nepalpyramids for hijacking your thread)
REALLY SORRY @lumberhack
it was my swift performance cache plugin that wasnt going well with wp optimize
and yes im using BunnyCDN
i will try wp optimize with my staging site and then try out in my live site
thank you so much for your quick response
really appreciate it
cheers
AND PAUL – NO WORRIES YOU WERE SIMPLY TRYING TO HELP — CHEERS
Thanks both for letting me know. I will mark this one as closed !
