agoraphone

Figured it out – the iThemes security plugin blacklisted me for some reason

Alright I think I finally purged all the malware. Here’s what worked for me – hope it can be of help if someone finds this thread in the future:

The Wordfence plugin found malware that my hosting provider, and all other plugins could not.

Anti-Malware from GOTMLS.NET plugin found a lot of malware, but not all of it – so every day I would run a search and find new malware had propagated. It also takes a long time to scan – about 4 hours compared to Wordfence’s scan of about 1 hour.

iThemes security plugin seems to provide some good hardening security measures, and when you’re changing passwords, it provides an easy way to update your salts (secret keys) and ensure any cookied logins are logged out.

I could not get the Sucuri plugin to scan for malware – pressed the scan button and nothing happened.

Hope someone finds these specifics helpful.

So I’ve changed all passwords multiple times, and now changed my database passwords as well. Also disabled access to wp-config.php in my .htaccess file and disabled php file editing in my WP config file.

Still every day I scan my sites and find a new backdoor script or other piece of malware. Short of wiping everything clean and starting fresh, I’m at the end of my rope.

Anyone have other specific suggestions?

Nice job, smartypants! Apparently Apple’s TextEdit puts in curly apostrophes instead of straight ones. All set now.

I think I have followed every step of that guide except for changing the MySQL database passwords. So now I am trying to do this and running into problems.

I changed the MySQL DB user password using Cpanel. My site then gave me the “can’t connect to database” error, as I would expect. I then downloaded my wp-config.php, replaced the password, and re-uploaded the file. I would expect the site to work now, but instead, I’m getting an error 500. What did I do wrong?

Thanks

I have the same problem. The issue occurs if there is any html tags in your product descriptions, such as a hyperlink, or even a <p> tag. Disabling the plug-in for now…

I’m also having the same issue. My google pagespeed insights score is unchanged after plugin installation: 66 mobile, 81 desktop. Among the suggestions is to Leverage browser caching. The strange thing is that “Enable compression” test passes on desktop, but not mobile.

Any ideas?
Thanks

I have spoken with my host and they don’t know what’s causing the issue. I’d rather not switch hosts if I don’t have to since I’d have to move and reconfigure 4 complete sites. Any thoughts on what could be wrong from a hosting perspective? I have 1GB of memory in my plan, which seems like it should be enough.

Thanks for all your help – I’m all set now

I’ve got multiple wordpress sites on the same host that all have the same issue. They all use themes that I’ve downloaded, but haven’t done anything custom to them myself. I’ve tried disabling all plugins, but it makes no difference. One of the sites is StepmomGifts.com, if you want to have a look, although you may have to wait a while, since I just tried to upload an image and the server is spinning its wheels again.

phpmyadmin may be set up incorrectly or you’re not logging in there with the right credentials.

Yes now I think we’re getting somewhere. When I access the php web interface, it doesn’t ask me to authenticate. I was thinking before that I was authenticated via cookies, but I don’t think that’s the case. I don’t see how to log out of the admin though, or how to force it to ask me for a login. Any thoughts?

Thanks for the suggestion! I was indeed able to log in through the command line and see the databases that way. Any idea why I’m not seeing them in the web interface?

I guess if I can’t get to them via the web, then there’s probably a way to export them through command line.

I was able to fix it FINALLY! I used this tutorial: https://www.smashingmagazine.com/2013/04/moving-wordpress-website/
I think what did it for me was turning custom permalinks OFF before exporting the database, then turn them back ON in the new site after importing the database.

At first I got a blank white screen of death when loading the new site, but after I removed all plug-ins, it worked fine – switched custom permalinks back on, and all was good!

@dcowen76, any progress on this? I’m having the same problem.

I migrated my WP site to a new computer. The homepage loads fine, but all other pages give an error 404. Using default permalinks fixes the problem, but I need the postname in my permalinks.

I have a .htaccess file in my WP directory that seems to be configured correctly, but I should note that when I rename the file, WP does NOT create a new version.

Any help/suggestions from anyone is appreciated! Been banging my head against the wall on this all weekend.
TIA

My restore is also getting stuck. Both of my servers are local and I tried the import twice.

The first time I used the regular import tool, and it seemed to start fine, but then got stuck forever with the spinning progress indicator on “restoring database”. After letting it try for 2 hours, I gave up and closed the window. It did seem to import my data, since all the files are visible in the wp-admin and the homepage loads fine. But when I click any links, I get an error 404. I saved my permalinks settings 3x, but all pages except the homepage are not found. I can see them in the wp-admin file list, but they won’t be served.

So I tried importing via the backup tool as you mentioned above, but it’s been about 15 minutes and it’s still spinning its wheels. My backup file is 55MB. Any help appreciated!
Thanks