deleted WPHB Minify Group files

Hi Support.
I received an audit report today for my solnectics.com site and it says that the guest user has been deleting WPHB Minify Group files, lots of them since 5th march, any idea why this is, and what's the impact?

I also see that I'm been constantly targeted by users, trying to break into my site. Anything I can do about this?

Also is there a way to add IP addresses that fail login attempt, to be blocked automatically, for life?

what's annoying is that, they have identified my Admin user-name, would be nice if this was hidden?

Cheers, Rawson

  • Adam Czajczyk

    Hello Rawson,

    I hope you're well today and thank you for your question!

    I'm not quite sure what the audit(ors) mean by "WPHB Minify Group files" but I suppose that may related to the files created by minification featured - minified and combined JS/CSS resources. If your audit enlists these files specifically (or at least gives examples of them), could you please share that information with me? That could be helpful.

    If these are indeed the files that I mentioned, there wouldn't be a serious impact because the plugin would re-create them. It might however slow down the site a bit if they would have to be recreated each and every time the site is loaded :slight_smile: It think though that you might want to enable storing of these files on our cloud and that could prevent them from being deleted. You can do this on "Hummingbird -> Minification" page at the very bottom.

    As for further security. I think you might want to give our Defender a go as it includes IP lockout feature, it would log users activity on the site and also it includes some nice "security hacks" that could be applied to the site increasing it's security. Take a look here please:

    https://premium.wpmudev.org/project/wp-defender/

    Best regards,
    Adam

  • Rawson

    Hi Adam, thanks for the reply.
    I am already using hummingbird and Defender. as it was Defender that sent me an automated email, where it identified the deleting of files, Since march 5th, by the guest users, and all the attacks on my site, which I now ban each day.. I have given support access to my site, so they can check it out.

    Q. I also noticed today inside hummingbird Minifying control pannel, that there are a couple of files that say pending >> upfront-front-grid, current_theme & optin_front. Any idea why this is?

    Q. Also in previous versions of Minification, you could control where the files resided - header, body, footer, now its only footer & original. So where is original, if you have previously moved files from the header to the footer & vice versa etc? How do I move something back to the header section, or how do I know where the original location was?

    Q. Is there a Minification recommended setting where the Upfront files should reside... Original, body, footer, include, combine, minify

    Q: I am also running WP Super Cache, could this be causing the issue?
    I don't want a slow site, so need to resolve this?

    Otherwise here is the deletes log: Summary
    Date
    Event Context Action IP Address User
    deleted WPHB Minify Group "8a83ef26ffac4b843371c4d258b28cfb-styles"
    added new WPHB Minify Group "8a83ef26ffac4b843371c4d258b28cfb-styles"
    1 day ago
    March 12, 2017 12:07 pm Content / WPHB Minify Group Deleted 66.249.76.110
    Guest
    added new WPHB Minify Group "7c1c27fff247465a1c61547ae0705ba6-scripts"
    1 day ago
    March 12, 2017 7:17 am Content / WPHB Minify Group Updated 188.138.105.23
    Guest
    deleted WPHB Minify Group "0a6de3b2fdf5531257bc4308126cb95a-styles"
    added new WPHB Minify Group "0a6de3b2fdf5531257bc4308126cb95a-styles"
    2 days ago
    March 11, 2017 4:06 am Content / WPHB Minify Group Deleted 67.205.136.68
    Guest
    deleted WPHB Minify Group "c7ac883e47cbb4e347298f9e91ce6db2-styles"
    added new WPHB Minify Group "c7ac883e47cbb4e347298f9e91ce6db2-styles"
    2 days ago
    March 11, 2017 3:37 am Content / WPHB Minify Group Deleted 67.205.136.68
    Guest
    deleted WPHB Minify Group "198b87c17788b152631f0ba91e0d7b6d-scripts"
    added new WPHB Minify Group "198b87c17788b152631f0ba91e0d7b6d-scripts"
    2 days ago
    March 11, 2017 2:25 am Content / WPHB Minify Group Deleted 77.72.0.70
    Guest
    deleted WPHB Minify Group "6089b83422933b6f2cdb88456c362da4-styles"
    added new WPHB Minify Group "6089b83422933b6f2cdb88456c362da4-styles"
    2 days ago
    March 10, 2017 10:21 pm Content / WPHB Minify Group Deleted 67.205.154.22
    Guest
    added new WPHB Minify Group "c69cb011c2533c483415f101cb2f35f8-scripts"
    2 days ago
    March 10, 2017 8:13 pm Content / WPHB Minify Group Updated 77.72.0.70
    Guest
    deleted WPHB Minify Group "c69cb011c2533c483415f101cb2f35f8-scripts"
    added new WPHB Minify Group "c69cb011c2533c483415f101cb2f35f8-scripts"
    2 days ago
    March 10, 2017 8:13 pm Content / WPHB Minify Group Deleted 77.72.0.70
    Guest
    deleted WPHB Minify Group "d4c53daef8eb5ec6b9a53a026860c41e-scripts"
    added new WPHB Minify Group "d4c53daef8eb5ec6b9a53a026860c41e-scripts"
    2 days ago
    March 10, 2017 5:33 pm Content / WPHB Minify Group Deleted 86.5.209.20
    Guest
    added new WPHB Minify Group "4296f2c65e88c07b330f1d93e3f396f3-scripts"
    3 days ago
    March 10, 2017 11:53 am Content / WPHB Minify Group Updated 77.72.0.70
    deleted WPHB Minify Group "8ce785f6eea9b97f2ec496c3ca3a9eda-styles"
    added new WPHB Minify Group "8ce785f6eea9b97f2ec496c3ca3a9eda-styles"
    1 week ago
    March 5, 2017 11:08 pm Content / WPHB Minify Group Deleted 89.34.237.101
    Guest
    deleted WPHB Minify Group "f6eae208797e5c5e5eefe5919a0a0c9d-scripts"
    added new WPHB Minify Group "f6eae208797e5c5e5eefe5919a0a0c9d-scripts"
    1 week ago
    March 5, 2017 6:35 pm Content / WPHB Minify Group Deleted 66.249.76.29
    Guest

  • Rawson

    Hi Adam
    Hey could you also please tell me why I am seeing cached .js & .css files in the root of my uploads folder?? I have a /uploads/wp-hummingbird-cache folder, but nothing in it!

    So I reset all my hummingbird settings and went through the setup again, deleted the cached files, but it still put them in the root of the Uploads folder!
    So how do I change the location where it places it's cached files, so they go into the correct folder?

    Also Minify report is also saying that I need to Optimize CSS Delivery of the following: But I thought that was what hummingbird minification does when it's enabled?

    /wp-content/uploads/74ae044f18f3c578462e7e59605b70d2.css
    /wp-admin/admin-ajax.php?action=upfront_load_grid
    /wp-content/uploads/8c60c6020843572557b6c597e856c690.css
    /wp-admin/admin-ajax.php?action=upfront_load_styles&layout%5Bspecificity%5D=single-page-98&layout%5Bitem%5D=single-page&layout%5Btype%5D=single&layout_post_id=119&template_post_id

  • Predrag Dubajic

    Hi Rawson,

    Defender will track changes on your site and when new HB minified group files are created the old ones will be deleted and Defender catches that as well but there's nothing to be concerned about.

    Q. I also noticed today inside hummingbird Minifying control pannel, that there are a couple of files that say pending >> upfront-front-grid, current_theme & optin_front. Any idea why this is?

    If files are not minified they will not have any change in the size and it will just say pending as status.

    Q. Also in previous versions of Minification, you could control where the files resided - header, body, footer, now its only footer & original. So where is original, if you have previously moved files from the header to the footer & vice versa etc? How do I move something back to the header section, or how do I know where the original location was?

    There is actually not much use of moving the files to header so that option was removed from HB.
    To get better results in speed tests you should move as many files as possible to footer but without breaking your site functionality.
    There's no need to move something back to header section, just select Original section and the file will be loaded in correct place as plugin/theme defined it.

    Q. Is there a Minification recommended setting where the Upfront files should reside... Original, body, footer, include, combine, minify

    Upfront has some predefined values for Minification and in most cases there shouldn't be additional changes needed for UF files.
    If you're having issues with moving location of some of the UF files please start a separate thread so we can investigate this further.

    Q: I am also running WP Super Cache, could this be causing the issue?
    I don't want a slow site, so need to resolve this?

    WP Super Cache should work fine with HB and shouldn't cause any issues.
    If you're still building your site with Upfront it's suggested to disable both caching and minification during this as these tools should be active once you're done developing your site.

    Hey could you also please tell me why I am seeing cached .js & .css files in the root of my uploads folder?? I have a /uploads/wp-hummingbird-cache folder, but nothing in it!

    Could you try disabling your other plugins and re-saving the settings in HB Minification panel, to see if that changes the location of files to correct place?
    If that doesn't return any results please start a new thread for this issue so we can deal with it separately.

    Also Minify report is also saying that I need to Optimize CSS Delivery of the following: But I thought that was what hummingbird minification does when it's enabled?

    Minification tool requires some tweaking depending on theme and plugins you have running on your site.
    Speed reports have a bit specific reports, sometimes combining all the files can cause large combined files and speed test doesn't like that, again this depends on theme and plugins you have running.
    Sometimes it's better excluding larger js or css files from combining with other files and leave them only minified.
    Unfortunately there's no way to automate this process and it needs to be configured specifically for each installation.

    P.S. Please keep the questions that are not closely related in separate threads, having multiple questions in same thread makes it harder for staff members to follow up with everything and it will only delay response times for both you and other members.

    Best regards,
    Predrag

  • zulu11

    I am also seeing this in my audit reports.

    The message "deleted WPHB Minify Group "388e7daf6833438e1c419e2403fa5aff-scripts"

    The IP address listed is in France, surely there must be someone (a developer) who can verify if this is indeed the innocent behavior of a plugin or in fact something to be concerned about. I for one, do not like the idea of anyone having access to my server to delete scripts/files!

    Some clarification from the developer of Defender would be appreciated.