“System” showing in logs

  • I received a notification that someone updated a post. I found this message in the logs:

    system Wpcode status has been changed (details):
    ID: 1548, Old status: new, New status: draft, Title: Display a message after the 1st paragraph of posts

    Who is “system”?? I didn’t find a user with that name, or any logins recently using that name.

    I did look in WPcode and found two snippets added. I deleted them, but now I am trying to figure out how this happened??

    The IP address of the change came from Japan so I know it’s a hacker. What I can’t figure out is how they may have gotten in to change the file! It wasn’t malicious or anything, and there’s no other flags. The site appears clean. I want to prevent this from happening again, but I’m very confused as to what happened!

    TIA

Viewing 3 replies - 1 through 3 (of 3 total)

  • Hey, did you ever get to the bottom of this? I’ve had similar notifications for two of my websites.

    Thanks

    Paul

    Hi!

    The same happened to me. I also deleted the 2 new code snippets. Before doing so, I checked their contents and they were harmless (one was just plain text in the HTML snippet).

    The “Code Snippets” plugin was updated 4 days ago (19 July) and there are now many options for generating snippets for common use cases. I am wondering if the above 2 snippets have been generated automatically by Code Snippets when the auto-update happened?

    Everything else seems to be in order.

    • This reply was modified 2 years, 7 months ago by vyyt.

    UPDATE+CORRECTION:
    ==================

    It is not the “Code Snippets” plugin, but “Insert Headers & Footers” plugin causing this. I tried updating it on another site. Its name changed to “WPCode – Insert Headers, Footers, and Code Snippets” and it WP admin menu item is now labeled as “Code Snippets” – hence the confusion.

    Once I updated the plugin, it surely created the 2 new snippets for disabling comments and for the 1st paragraph blabla.

    Mystery solved, case closed, no need to panic ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘“System” showing in logs’ is closed to new replies.