OS Ticket Online after awkward upgrade

dallenfarmer

Sorry for the odd title, I wasn't sure how to word this issue.

My InMotion VPS account had an unauthorized login over the weekend, and messed with some things...unable to pinpoint exactly what was altered. When attempting to login to my OsTicket installation via, it directed to the public facing login page, and none of the links worked. I backed up the database and updated the OsTicket install via Softaculous autoinstaller, and now I just get the system is offline screen. I attempted to force the system online via myPhp, but it showed it was already online (isonline=1). Anyhow, any help or suggestions you can offer would be genuinely appreciated.

Technical info:
php version: was 7.4.30; upgraded to 8.0.21 to upgrade OsTicket version
OsTicket version: 1.16.3
OS: CentOS v7.9.2009
This issue occurs on both client side and staff side of the UI
here is the URL for reference: ticket.barefootmgmt.com

Here is the log file:
[08-Jun-2022 02:45:12 UTC] PHP Warning: session_start(): Failed to read session data: user (path: /var/cpanel/php/sessions/ea-php72) in /home/dallen5/ticket.barefootmgmt.com/include/class.ostsession.php on line 87
[23-Jul-2022 05:41:44 UTC] PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/dallen5/ticket.barefootmgmt.com/js/bodybg.php on line 1
[23-Jul-2022 05:41:44 UTC] PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/dallen5/ticket.barefootmgmt.com/js/bodybg.php on line 1
[23-Jul-2022 05:41:44 UTC] PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/dallen5/ticket.barefootmgmt.com/js/bodybg.php on line 1
[23-Jul-2022 05:41:44 UTC] PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/dallen5/ticket.barefootmgmt.com/js/bodybg.php on line 1
[23-Jul-2022 05:41:44 UTC] PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/dallen5/ticket.barefootmgmt.com/js/bodybg.php on line 1
[23-Jul-2022 23:56:15 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786
[23-Jul-2022 23:56:15 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786
[23-Jul-2022 23:56:45 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786
[23-Jul-2022 23:56:45 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786
[23-Jul-2022 23:56:57 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786
[23-Jul-2022 23:56:57 UTC] PHP Warning: Invalid argument supplied for foreach() in /home/dallen5/ticket.barefootmgmt.com/include/class.forms.php on line 3786

KevinTheJedi

dallenfarmer

Actually, I didn't read that error all the way as I see it says /js/bodybg.php which is not a file from the core osTicket. I think that you or someone else added some custom files which it's now complaining about.

Cheers.

ntozier

If this were me:
I would spin up a new server (With a different local admin user and password).
I would restore my sites and databases from my last known good back up.
I would change the DB usernames and passwords.

If someone got in who knows what back doors and bad files they boobytrapped the system with.