Buwan ng hunyo wikipedia.REGISTER NOW GET FREE 888 PESOS REWARDS!

(Solved – I thought this was) Hacked!!!

rafaelvleite — Mon, 11 Oct 2021 12:32:08 +0000

Please don’t intstall it in your website! It is hacked (github doesn’t exist anymore). Every time someone will click a link in your banner the FIRST TIME using MOBILE, it will redirect to unwanted websites. Don’t install it!!!

Reply To: (Solved – I thought this was) Hacked!!!

rpetersen29 — Mon, 11 Oct 2021 12:35:27 +0000

@rafaelvleite I’m not sure where you’re getting this from but this is not true. The GitHub repo is no longer active because I moved the code to a private repo, and even so, all code is visible from the development tab and all commits have come from me.

Reply To: (Solved – I thought this was) Hacked!!!

rafaelvleite — Mon, 11 Oct 2021 12:52:38 +0000

It happened to my website. The steps to simulate this is:

Open a new browser in incognito mode
Adjust screen size as mobile (or do it in a mobile)
Open the webpage with simple banner with a link
Click the link
* please dont login as admin

A popup will open leaving to unwanted websites. Plugin is corrupted.

Reply To: (Solved – I thought this was) Hacked!!!

rafaelvleite — Mon, 11 Oct 2021 12:53:45 +0000

It is cooked to happen only the first time! Then it will show no more popups. In practice, every user will be redirected to that website and the banner lost its purpose

Reply To: (Solved – I thought this was) Hacked!!!

rpetersen29 — Mon, 11 Oct 2021 13:48:10 +0000

Hi @rafaelvleite it sounds like your website got hacked and not my plugin. You can look through the code, there is nothing in the code that would support such a mechanism.

Here’s the code in question, https://plugins.trac.www.ads-software.com/browser/simple-banner/trunk/simple-banner.js#L10. It simply takes the text parameter and put it in an html element.

You should look through your database and make sure no one has made unauthorized changes.

Reply To: (Solved – I thought this was) Hacked!!!

rpetersen29 — Mon, 11 Oct 2021 13:53:48 +0000

All code for this plugin is open source and available to browse through the WordPress plugin website, https://www.ads-software.com/plugins/simple-banner/#developers. Every commit I make is directly to WordPress. I would urge you to look through source code before making false claims like this.

Reply To: (Solved – I thought this was) Hacked!!!

Steven Stern (sterndata) — Mon, 11 Oct 2021 14:06:01 +0000

@rafaelvleite

Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

Reply To: (Solved – I thought this was) Hacked!!!

Steven Stern (sterndata) — Mon, 11 Oct 2021 14:07:28 +0000

@rpetersen29 Moderators have reviewed this topic and it’s not spam. Let’s help this user clean up his site…

@rafaelvleite if you need additional assistance cleaning your site, please see the links above and post additional info, if necessary, in a new topic not related to this plugin.

Also, this topic has been moved from “reviews” to “support”.

Reply To: (Solved – I thought this was) Hacked!!!

rpetersen29 — Mon, 11 Oct 2021 14:10:51 +0000

@sterndata thanks, apologies for the wrong label.

Reply To: (Solved – I thought this was) Hacked!!!

rafaelvleite — Mon, 11 Oct 2021 16:00:51 +0000

Thank you so much for the moderation Steve, I just took a deep breath ??
Sorry for anything @rpetersen29 I don’t want to harm your business.
But I need to warn there is someting really wrong with the plugin (and it is not the first time, since “Simple Banner” had vulnerability issues is the past and I found the many websites listing this plugin as causing websites to get hacked).
I just ran a full scan with the main websites (Quttera, etc) and thankfully no malware was found. I also installed a Malware detector plugin (“Anti-Malware Security and Brute-Force Firewall”) and ran a full scan and nothing was found.
I will run some other tests with the plugin in a new, fresh and clean website and I will record videos of it. I will not stop until this case is solved, because someone is getting money redirecting people to undesired websites.
By the way @rpetersen29 please kindly let me know why you moved your code to a Private Repo. When we install this plugin and from inside wordpress click to know more about the website, it leads to a not found page.