[SOLVED] Site freezes after visiting a few pages.

[urheat]

I have a critical problem and I'm pretty stuck here.

Everything worked fine and then suddenly after navigating randomly, site freezes and "Gateway timeout 504" appears. It isn't the same page that freezes. It's a random page.

I contacted to my host and they said that the site tries to contact to some Google Services that maybe down (IP: 64.233.164.141). I commented the Google font tags, but still the problem occurs.

I set the debug mode on, but the problem is that when the site freezes, I get "504" message and the debug info is not visible.

If I clear the browser cache and visit the site again, everything works fine for a while, until after a few clicks, the site frozes again.

CMSMS pros, please - any ideas!

CMSMS 1.11.10
FrontEndUsers 1.24
CGSimpleSmarty 1.7.4
CGUserDirectory 1.4.5
CGSmartImage 1.16.2
FormBuilder 0.7.3
Captcha 0.4.6
PHP 5.3.28

[staartmees]

you're sure your site hasn't been hacked? No strange files or files with an abnormal filesize?

[urheat]

Thanks staartmees!

Everything is possible, but I don't think so, 'cause I haven't noticed anything else strange. And the site is a development site and has been almost 100% in "Site down" -mode. Though in same webhotel there is also uptodate Wordpress site.

Is there any way to check if some CMSMS files are hacked? Or if site is hacked?

Do you have any idea why CMSMS tries to connect to the IP 64.233.164.141 (it seems to be Google's server)?

[Jo Morg]

The core files don't have any dependency on any Google service, so the only thing I can think of atm is:
- Google fonts, you use any on your site?
- Google maps, same question?
- or any other Google service, for that matter?...

[urheat]

Thanks Jo Morg!

I use Google fonts as I use tens of other CMSMS sites. I even commented the Google font tags, but no effect.

Don't use maps or any other Google services.

This is the only Google releated tag besides the Google fonts:

Code: Select all

<!--[if IE]>
	<__script__ src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></__script>
<![endif]-->

My host suggested that if we deny the trafic of the problematic IP, we could find what is causing the problem. I get back to you, when our test is done.

Mean while any help appreciated

[Jo Morg]

BTW and just in case:

Is there any way to check if some CMSMS files are hacked? Or if site is hacked?

Typically you just do a checksum on core files, but there are a few false positives that should be expected, usually temp files, and lang files missing or changed. 3rd party modules don't have checksum, but any core php files that you may find to be modified, specially index.php should be reason to suspect hacking/infection...

[chrisbt]

Is there anything unusual in the output html (i.e. view-source:) of the problematic page?

[urheat]

Is there anything unusual in the output html (i.e. view-source:) of the problematic page?

I don't know, 'cause when the problem occurs (the page is random, not the same every time), all I can see is 503 error page. So I can't see the source code of the real page, at least I don't know how.

[urheat]

Problem solved. Either CGSmartImage or GExtensions creates endless loop if "Enable Responsive Images" option is enabled in CGSmartImage module. So when I unchecked it, problem disappeared.

Afterwards I noticed that there are some bug reports concerning this in CGSmartImage Bug Tracker.

This time though the cause was pretty hard to find because I didn't get any specific error messages. Thankfully my host used their magic And thanks to all who tried to help me. The site is fine and running again!

[paulbaker]

Just to help others who come across this thread, here's a link to the explanation from calguy:
http://forum.cmsmadesimple.org/viewtopi ... =7&t=71046