How to get back the 4 days offline web? encripted code, not access to wordpr

What do you mean by “encrypted” code?

Compare the file /wp-includes/wp-db.php to a freshly downloaded copy of that file from www.ads-software.com. If they differ, you’ve been hacked.

If so, you need to start working your way through these resources:

• https://codex.www.ads-software.com/FAQ_My_site_was_hacked
• https://www.ads-software.com/support/topic/268083#post-1065779
• https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
• https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:

• https://sitecheck.sucuri.net/scanner/
• https://www.unmaskparasites.com/
• https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Hi Steve
Thanks for your advice. Working on that now.

Hi,

We have been working on the problem, but I am a bit confused. Some say it’s something very simple to fix as it’s not a virus problems. Other says it will take long to fix it.
Tracking the error code link send by the server provide, we got this:

Fatal error: Uncaught Error: Function name must be a string in /home/monicwt63/domains/theprisma.co.uk/public_html/wp-includes/wp-db.php:2331 Stack trace: #0 [internal function]: g2c85e(‘wp_get_server_p…’) #1 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-includes/wp-db.php(2327): array_filter(Array, ‘g2c85e’) #2 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-includes/load.php(364): require_once(‘/home/monicwt63…’) #3 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-settings.php(88): require_wp_db() #4 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-config.php(87): require_once(‘/home/monicwt63…’) #5 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-load.php(37): require_once(‘/home/monicwt63…’) #6 /home/monicwt63/domains/theprisma.co.uk/public_html/wp-blog-header.php(13): require_once(‘/home/monicwt63…’) #7 /home/monicwt63/domains/theprisma.co.uk/public_html/index.php(17): require(‘/home/monicwt63…’) #8 {main} thrown in /home/monicwt63/domains/theprisma.co.uk/public_html/wp-includes/wp-db.php on line 2331

This looks just…. ‘non understandable’. Can anyone help with advice for next step? 5 days off. Do I need an expert IT (hopefully not, as we are a non profit newspaper!). ?

Many thanks for your help

Monica

Please respond to my first question:

What do you mean by “encrypted” code?

Hi Steve,

it’s the terminology used by the server provider. I woudl like to know too. Thanks

@monicadelpilar1975

What do you mean by “offline”?

4 days offline web? encripted code, not access to wordpr

I can see and navigate the front end of the site right now. Do you mean that you are unable to log into your Dashboard? I can confirm that /wp-admin and /wp-login.php both return 404 errors.

If you mean by “no access to wordpress”, that the problem is with logging in, rather than the site actually being “offline”, could it be because of the iThemes Security plugin “Hide the Backend” security feature? (I can confirm that you have the iThemes Security plugin installed) Does that seem any closer to what’s actually happening?

Is it that you just can’t login after using the security plugin to hide the login URL?

(just a shot in the dark, based on what I see on your site, mind you)

[edit] .. and the error code “500 internal server configuration” errors that you had yesterday appear to be gone today, so maybe you’ve made some progress? ??

Hi Clayton,

Minutes before my last post our brilliant IT fixed the problem. That’s why the site is online again. Thanks