• Resolved darkwoodphotos

    (@darkwoodphotos)


    I’ve got a whole site of “pay per post” content. And it appears that someone is hacking it. Here’s why: Top-selling content has the “pay per post” flag one day. And then, a few days later, the flag is gone. With ALL other content still having the flag and being intact. Are there any known vulnerabilities or ways to “harden” pay per post to prevent this theft?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Matt Pramschufer

    (@mattpramschufer)

    Hey there, I have never heard of this before. Those flags get stored in the post_meta for each post you are protecting. Have you run any malware scanner on your site, or run Wordfence to see if there is any active exploits on your site.

    I can assure you that all of the saving of post meta gets wrapped around logic which makes sure they have permissions to update the post along with all data being sanitized.

    Thread Starter darkwoodphotos

    (@darkwoodphotos)

    We have Wordfence installed, and have reviewed our Admins and their actions. Nothing in the database SEEMS to show when the flags are being stripped, or how. But only the most expensive content is being de-flagged, so it has me convinced that some outside party is *probably* involved.

    Plugin Author Matt Pramschufer

    (@mattpramschufer)

    You might want to take a look at https://www.ads-software.com/plugins/wp-security-audit-log/ that would give you a more detailed results of who / what is removing the post meta.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[NSFW] Posts Going Free’ is closed to new replies.