wordpress not working from basic install

Centmin Mod values security and puts additional measures in place so that end users are also mindful of security. So in your case, you might need to whitelist or unblock the WP plugins related to your 403 permission denied messages.

If you used centmin.sh menu option 22 auto installer Wordpress Nginx Auto Installer, the default wpsecure conf file at /usr/local/nginx/conf/wpincludes/${vhostname}/wpsecure_${vhostname}.conf where vhostname is your domain name, blocks php scripts from executing in wp-content for security

Below links you can see examples of setting up specific wordpress location matches to punch a hole in the wpsecure blocking to whitelist specific php files that need to be able to run.

• Problem with timthumb security
• Wordpress - need help for woocommerce plugin
• Wordpress - Visual editor missing
• Wordpress - Social login plugin trouble
• Wordpress - Social login plugin trouble

If on Centmin Mod 123.09beta01, you may have ran into the new tools/autoprotect.sh cronjob feature outlined at Beta Branch - autoprotect.sh - apache .htaccess check & migration to nginx deny all | Centmin Mod Community You uploaded scripts may have .htaccess deny from all type files in their directories which may need bypassing autoprotect. It's a security feature that no other nginx based stack has as far as I know

So instead, all .htaccess 'deny from all' detected directories now get auto generated Nginx equivalent location match and deny all setups except if you want to manually bypass the directory from auto protection via a .autoprotect-bypass file - details below here.

You can read a few threads below on how autoprotect.sh may have caught some folks web apps falsely and the workarounds or improvements made to autoprotect.sh with the help of users feedback and troubleshooting.

• Is it better to add an exeption for 127.0.0.1 for autoprotect rules? | Centmin Mod Community
• IP.Board - Query on autoprotect + IPB forums | Centmin Mod Community
• Wordpress - Akismet JS and CSS - Forbidden? | Centmin Mod Community
• Nginx - Error 403 nginx with sngine script
• Wordpress - Wordpress Plugins 403 errors when plugin opens ZIP / txt file download

 

Sorry to hear you feel that way. Guess Centmin Mod LEMP stack isn't for you then as Centmin Mod tries to be more secure out of the box especially for Wordpress hence the extra steps. Demo of centmin.sh menu option 22 created Wordpress site on Centmin Mod 123.09beta01 more improved wordpress installer on Wordpress7 demo site.

 

True if you manually install wordpress and don't use centmin.sh menu option 22, then you get normal wordpress install and avoid most of the 403 permission denied errors but are missing performance and security optimisations found in centmin.sh menu option 22 installed wordpress installs.

 

yes you can choose to lessen security of your wp install and do that too.

wall of text in SSH session or in web browser ? I have no control over what is displayed in web browser when the browser sees 403 error and limited control over SSH session output when something fails for unknown reason. can you post example of what wall of text that is to gist.github.com or pastebin.com

can you explain how you updated exactly and list a few of the errors ? there's 2 branches 123.08stable and 123.09beta01 of centmin mod and both got updated recently

• 123.08stable commits only 1 happened this month - an update to nginx 1.15.0 default which doesn't trigger unless you run centmin.sh menu option 4 see centminmod/centminmod
• 123.09beta01 commits a bunch centminmod/centminmod

Updating centmin mod is via centmin.sh menu option 23 submenu option 2 or in 123.09beta01 case also via command = cmupdate. Did you use either method ? Or did you try to run installer/install command on existing centmin mod install ? That would indeed break things.

Upgrading Centmin Mod Code to Latest Version

Getting Started Guide step 19 outlines also how to keep Centmin Mod code updated or how to switch version branches or you can run cmupdate command that was recently added.

Centmin Mod LEMP stack's script code is constantly updated for improvements, bug fixes and security fixes so keeping the Centmin Mod code up to date is important. With Centmin Mod 1.2.3-eva2000.08) (123.08stable) and higher releases, a newly added centmin.sh menu option 23 allows much easier code updates and version branch switching via Git backed environment you can setup.

For 123.08stable that means centmin.sh menu option 23 submenu option 2 (if you previously ran submenu option 1) first, then exit centmin.sh, re-enter /usr/local/src/centminmod and re-run centmin.sh menu.

For 123.09beta01 and higher that means running SSH command = cmupdate and then re-enter /usr/local/src/centminmod and re-run centmin.sh menu.

For full details read the following links:

• New centmin.sh menu option 23 updating
• Centmin Mod Upgrades
• Cronjob Auto Updating Centmin Mod Code Guide
• How to upgrade Centmin Mod + backing up customisations

Upgrading Centmin Mod involves 2 parts.

1. Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod. This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to. You can easily update within a Centmin Mod version branch or switch version branches via centmin.sh menu option 23 outlined here.
2. Upgrade software that Centmin Mod installed or manages. For this part following outline at How to upgrade Centmin Mod software installed on your server.

So essentially, you can upgrade from one version branch to another i.e. 123.08stable to 123.09beta01 or higher in place, but not everything is upgraded as some things like server initial environment setup isn't changed i.e. how swap, tmp setup and allocation are created etc. The main parts from part 2 above are what in place upgrades do i.e. Nginx and PHP-FPM compilation and config/settings parameters and MariaDB version from 5.5 to 10.0.x. If you want the full environment changed including tmp and swap setup to 123.09beta01 etc configuration, then you would need a fresh OS install and fresh 123.09beta01 initial install. You can think of it like upgrading Windows 7 to Windows 8. An in place upgrade will upgrade code but won't change your computer environment from when you installed Windows 7 i.e. disk configuration and partition sizes won't change from when you initially installed Windows 7. Only way to change that would be fresh Windows 8 install.

 

Also example errors from those logs would be helpful too - can wrap them in BBCODE CODE tags or post to pasetbin.com or gist.github.com. For Centmin Mod 123.08stable and 123.09beta01 code updates, I can't test for all situations but for the 160+ Centmin Mod servers I just updated (only 10 are 123.08stable and rest are 123.09beta01), there hasn't been any breaking of LEMP stack or MariaDB MySQL issues as yet. So your error logs would be helpful in figuring out what happened if you still want to continue using Centmin Mod. Or moving back to siteground managed hosting?

for posting code or output from commands to keep the formatting, you might want to use CODE tags for code How to use forum BBCODE code tags

 

FYI, centmin mod 123.09beta01 is improved over 123.08stable so centmin.sh menu option 2 and 22 show the following text at vhost creation time (with letsencrypt ssl hence extra message regarding HTTPS/SSL)

Code (Text):

-------------------------------------------------------------
Setup full Nginx vhost + Wordpress + WP Plugins
-------------------------------------------------------------

---------------------------------------------------------------
Important Information
---------------------------------------------------------------

You are about to create an Wordpress based Nginx vhost site with
or without HTTPS/SSL support.
Also read the continually updated Getting Started Guide
at centminmod.com/getstarted.html if you haven't already
---------------------------------------------------------------
403 Permission denied message handling
if after vhost site setup you encounter 403 permission denied errors,
check https://community.centminmod.com/threads/11215/ to see if your
site needs tools/autoprotect.sh tweaking & whitelisting
---------------------------------------------------------------

Do you want to continue with Nginx vhost site creation ? [y/n] y

123.09beta01's improvements in every aspect of LEMP stack install and configuration are miles ahead of 123.08stable.