OCS is not working (probably compromised)


#1

Dear All,

We installed OCS software and started to create conferences (http://www.id-ocs.eu/). Everything was OK, but few day ago we are not able to log in and the following text appears:
NOTICE: Use of undefined constant HANDLER_CLASS - assumed ‘HANDLER_CLASS’ (/home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php:163)
ocs2 has produced an error Message: WARNING: array_map(): Argument #2 should be an array In file: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php At line: 163 Stacktrace: File: (unknown) line (unknown) Function: PKPApplication->errorHandler(2, “array_map(): Argument #2 should be an array”, “/home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc…”, 163, Array(5)) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php line 163 Function: array_map(“strtolower”, Null) File: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php line 130 Function: PKPPageRouter->route(Object(Request)) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPApplication.inc.php line 170 Function: Dispatcher->dispatch(Object(Request)) File: /home/idocseu/public_html/index.php line 69 Function: PKPApplication->execute() Server info: OS: Linux PHP Version: 5.6.23 Apache Version: N/A DB Driver: mysql DB server version: 5.6.31
ocs2 has produced an error Message: WARNING: in_array() expects parameter 2 to be array, null given In file: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php At line: 164 Stacktrace: File: (unknown) line (unknown) Function: PKPApplication->errorHandler(2, “in_array() expects parameter 2 to be array, null given”, “/home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc…”, 164, Array(6)) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php line 164 Function: in_array(“search”, Null) File: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php line 130 Function: PKPPageRouter->route(Object(Request)) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPApplication.inc.php line 170 Function: Dispatcher->dispatch(Object(Request)) File: /home/idocseu/public_html/index.php line 69 Function: PKPApplication->execute() Server info: OS: Linux PHP Version: 5.6.23 Apache Version: N/A DB Driver: mysql DB server version: 5.6.31
ocs2 has produced an error Message: WARNING: Cannot modify header information - headers already sent by (output started at /home/idocseu/public_html/lib/pkp/classes/core/PKPApplication.inc.php:295) In file: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php At line: 243 Stacktrace: File: (unknown) line (unknown) Function: PKPApplication->errorHandler(2, “Cannot modify header information - headers already sent by (outp…”, “/home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.ph…”, 243, Array(0)) File: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php line 243 Function: header(“HTTP/1.0 404 Not Found”) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php line 166 Function: Dispatcher->handle404() File: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php line 130 Function: PKPPageRouter->route(Object(Request)) File: /home/idocseu/public_html/lib/pkp/classes/core/PKPApplication.inc.php line 170 Function: Dispatcher->dispatch(Object(Request)) File: /home/idocseu/public_html/index.php line 69 Function: PKPApplication->execute() Server info: OS: Linux PHP Version: 5.6.23 Apache Version: N/A DB Driver: mysql DB server version: 5.6.31
404 Not Found

Stack Trace:

File: /home/idocseu/public_html/lib/pkp/classes/core/PKPPageRouter.inc.php line 166
Function: Dispatcher->handle404()

File: /home/idocseu/public_html/lib/pkp/classes/core/Dispatcher.inc.php line 130
Function: PKPPageRouter->route(Object(Request))

File: /home/idocseu/public_html/lib/pkp/classes/core/PKPApplication.inc.php line 170
Function: Dispatcher->dispatch(Object(Request))

File: /home/idocseu/public_html/index.php line 69
Function: PKPApplication->execute()

Please, davice me what to do.

Regards,
Mirko Spiroski


#2

Hi @MirkoSpiroski,

Why do you suspect your system was compromised?

Are there any other entries in your error log? The one you show is probably related to the problem but there might be something else more helpful.

Do you know if your server’s configuration has changed, e.g. an upgrade to your PHP installation?

Regards,
Alec Smecher
Public Knowledge Project Team


#3

Dear Alec,

We did not change anything and noticed above message and also the screen was changed (see screen shot). At the bottom, there is PHP Quick Profiler

Best regards,
Mirko Spiroski


#4

Hi @MirkoSpiroski,

The profiler can be enabled/disabled in config.inc.php in the show_stats option. I’d suggest turning that off and seeing if that resolves the problem.

Regards,
Alec Smecher
Public Knowledge Project Team


#5

Dear Alec,

We disabled show_stats option and the screen was cleared, but the content of the conferences is not visible. We shall reinstall the software.

Thanx again,
Mirko Spiroski


#6

Hi @MirkoSpiroski,

If you think something has gotten modified in your installation, you could also use the standard diff tool to compare your installation with the stock copy of the software.

Regards,
Alec Smecher
Public Knowledge Project Team


#7

Hello
I have same issue. Where the option “show_stats” is located?

Thanks
Jason