<?xml version="1.0"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>Transition Technology: Ticket #917: Any misc files in Transition Culture web root?</title>
    <link>http://localhost:8080/trac/ticket/917</link>
    <description>&lt;p&gt;
Hi Chris
&lt;/p&gt;
&lt;p&gt;
Simon from Lumpy lemon has migrated Transition Culture.
&lt;/p&gt;
&lt;p&gt;
We only have WP admin access &amp;amp; he was wondering:
&lt;/p&gt;
&lt;p&gt;
"Just one small question: can you check in the webroot folder on your server and let me know if there are any non-&lt;a class="wiki" href="http://localhost:8080/trac/wiki/WordPress"&gt;WordPress&lt;/a&gt; files in there? e.g. Google verification files, that sort of thing. I don't think there should be, but best to check. If there are, can you send them over."
&lt;/p&gt;
&lt;p&gt;
Thanks
&lt;/p&gt;
&lt;p&gt;
Sam
&lt;/p&gt;
</description>
    <language>en-us</language>
    <image>
      <title>Transition Technology</title>
      <url>/trac/chrome/site/TransitionNetwork-Logo-Web-Small.jpg</url>
      <link>http://localhost:8080/trac/ticket/917</link>
    </image>
    <generator>Trac 0.12.5</generator>
    <item>
      
        <dc:creator>chris</dc:creator>

      <pubDate>Thu, 14 Jul 2016 12:01:05 GMT</pubDate>
      <title>hours, totalhours changed</title>
      <link>http://localhost:8080/trac/ticket/917#comment:1</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/917#comment:1</guid>
      <description>
          &lt;ul&gt;
            &lt;li&gt;&lt;strong&gt;hours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.1&lt;/em&gt;
            &lt;/li&gt;
            &lt;li&gt;&lt;strong&gt;totalhours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.1&lt;/em&gt;
            &lt;/li&gt;
          &lt;/ul&gt;
        &lt;p&gt;
Here is a list of the files:
&lt;/p&gt;
&lt;pre class="wiki"&gt;cd /home/tc/sites/default/
ls -lah
total 220K
drwxr-x---  5 tc tc 4.0K Jul 13 22:33 .
drwx------  3 tc tc 4.0K Dec  9  2013 ..
-rw-r--r--  1 tc tc  807 Jun 20 11:53 .htaccess
-rw-r--r--  1 tc tc   75 Dec  9  2013 .htaccess.bak
-rw-r-----  1 tc tc 1.4K Feb  5  2008 favicon.ico
-rw-r-----  1 tc tc   53 Oct 11  2012 google4ef510c6b847a9b0.html
-rw-r-----  1 tc tc  418 Sep 25  2013 index.php
-rw-r--r--  1 tc tc  20K Jul 13 22:31 license.txt
-rw-r-----  1 tc tc 1.7K Sep  3  2013 nginx.conf
-rw-r--r--  1 tc tc 7.2K Jun 21 18:35 readme.8e7c2d7e9f3ffd58f403928e7399990f.html
-rw-r--r--  1 tc tc 7.2K Jul 13 22:31 readme.html
-rw-r-----  1 tc tc    0 Dec  8  2012 robots.txt
-rw-r--r--  1 tc tc 5.0K Jul 13 22:31 wp-activate.php
drwxr-x---  9 tc tc 4.0K Jul 13 22:31 wp-admin
-rw-r--r--  1 tc tc  364 Jul 13 22:31 wp-blog-header.php
-rw-r--r--  1 tc tc 1.5K Jul 13 22:31 wp-comments-post.php
-rw-r--r--  1 tc tc 2.8K Jul 13 22:31 wp-config-sample.php
-rw-r-----  1 tc tc 1.6K Dec 10  2013 wp-config.php
drwxr-x--- 10 tc tc 4.0K Jul 13 23:57 wp-content
-rw-r--r--  1 tc tc 3.3K Jul 13 22:31 wp-cron.php
drwxr-x--- 16 tc tc  12K Jul 13 22:31 wp-includes
-rw-r-----  1 tc tc 2.4K Sep 25  2013 wp-links-opml.php
-rw-r--r--  1 tc tc 3.3K Jul 13 22:31 wp-load.php
-rw-r--r--  1 tc tc  34K Jul 13 22:31 wp-login.php
-rw-r--r--  1 tc tc 7.8K Jul 13 22:31 wp-mail.php
-rw-r--r--  1 tc tc  13K Jul 13 22:31 wp-settings.php
-rw-r--r--  1 tc tc  28K Jul 13 22:31 wp-signup.php
-rw-r--r--  1 tc tc 4.0K May 19  2015 wp-trackback.php
-rw-r--r--  1 tc tc 3.0K Jul 13 22:31 xmlrpc.php
&lt;/pre&gt;
      </description>
      <category>Ticket</category>
    </item><item>
      
        <dc:creator>chris</dc:creator>

      <pubDate>Thu, 14 Jul 2016 12:03:04 GMT</pubDate>
      <title></title>
      <link>http://localhost:8080/trac/ticket/917#comment:2</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/917#comment:2</guid>
      <description>
        &lt;p&gt;
This is the contents of the &lt;tt&gt;.htaccess&lt;/tt&gt; file, Simon sould be able to get all the other files via HTTP, of course if he would like SSH access that can also be sorted out.
&lt;/p&gt;
&lt;pre class="wiki"&gt;Redirect /feed/ http://www.transitionnetwork.org/blogs/feed/rob-hopkins/
# This was being abused
&amp;lt;Files xmlrpc.php&amp;gt;
   Order deny,allow
   deny from all
&amp;lt;/Files&amp;gt;
# BEGIN WordPress
&amp;lt;IfModule mod_rewrite.c&amp;gt;
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
&amp;lt;/IfModule&amp;gt;
# END WordPress
# BEGIN WORDPRESS PLUGIN stop_xmlrpc_attack
&amp;lt;Files "xmlrpc.php"&amp;gt;
order deny,allow
deny from all
allow from 10.0.0.0/8
allow from 64.34.206.0/24
allow from 76.74.248.128/25
allow from 76.74.255.0/25
allow from 127.0.0.0/8
allow from 172.16.0.0/12
allow from 192.0.64.0/18
allow from 192.168.0.0/16
allow from 198.181.116.0/22
allow from 207.198.101.0/25
&amp;lt;/Files&amp;gt;
# END WORDPRESS PLUGIN stop_xmlrpc_attack
&lt;/pre&gt;
      </description>
      <category>Ticket</category>
    </item>
 </channel>
</rss>