bjwok

Ok interesting to hear. I think the server may be the cause. It’s one of the cheaper options that I signed a 10 year deal with, but they kept messing up in the early days and then extending my hosting because of their errors. I think I have 3 or 4 more years with them and at that point I will shift to a new host.

I’ll add CloudFlare as an extra layer just to be safe.

Can you offer any assistance as to why my Disqus is not showing up? On this page I should have loads of comments (and I can still see them when I check the actual post in WP): https://www.bjwok.com/lightroom5presets/lightroom-5-presets-for-music-photographers/

Unfortunately I cannot say exactly which version it was, I mean I didn’t really pay much attention to the numbers. Safe to say I’ve always updated WP whenever the notification popped up so I was up to date (more or less).

Now that I have things (somewhat) back to working how they were what steps would you recommend to safe guard my site? A friend baulked at me for not having CloudFlare in front of the site to begin with, is that something you would recommend and if not what should I do to ensure I don’t get slammed again?

Yeah man, all plugins were updated.

I was on the previous version on WordPress before the cleanup as it did prompt me to install the updated WP ??

Sure thing:

Akismet Anti-Spam
Anti-Malware Security and Brute-Force Firewall
Background Control
Disqus for WordPress
Easy Digital Downloads
Facebook Page Promoter Lightbox
FD Feedburner Plugin
Hidden Tags
Image Banner Widget
Image Mouseover
Image Widget
Lightbox Gallery
Social Media Icons Widget
Sucuri Security – Auditing, Malware Scanner and Hardening
W4 Post List
Wordfence Security
WordPress Database Backup
WP Antivirus Site Protection (by SiteGuarding.com)
WP No Category Base
WP-phpMyAdmin
Yoast SEO
YouTube Embed
ZenfolioPress

Interesting that now my Disqus comments do not show up… Can’t work out why they have disappeared either. I’ve gone through the steps on the Disqus forum but cannot resolve it.

Ok site is almost back to normal. Got some small hiccups with some plugins not working like they were before the update, but for tonight that will have to do.

Ok, sorted that too.

Indeed there was a single \ in the header.php

It’s more than probably that I bumped the keyboard and thats how that got there.

Now I will re-start my plugins and check the site again, then I want to work on locking it all down ??

I went and checked the footer.php and found a bunch of sketchy code.

Removed it and all looks fine, except at the header of the page now there is a lone \ floating there at the top left.

I remember seeing that there before a long time ago and never thought nothing of it, perhaps that’s how the hackers got in? *I’m not very savvy with this kind of thing… ??

• This reply was modified 6 years, 6 months ago by bjwok. Reason: got the wrong slash, it was a \ not a /

Thanks @te_taipo I will work on cleaning it up first then lock it all down (with your help if possible).

At this stage I re-installed 4.9.5 over the top using the “if you need to re-install” option and it has cleaned up some of the links from the header, but the footer still looks compromised

@kartiks16 Do you have a recommended scanning solution?

I’ve also noticed this code added to a lot of my posts:

<script type='text/javascript' src="https://pastebin.com/raw/xxxxxx"></script>

• This reply was modified 6 years, 6 months ago by Jan Dembowski. Reason: Redacted, don't post that again here

@kartiks16 this is my site with ALL plugins deactivated ?? https://www.bjwok.com

I’ll leave it this way until you see it, then I’ll try switching back to the default theme.

@te_taipo I’ll try that later (if the above ideas are not working) ??

• This reply was modified 6 years, 6 months ago by bjwok.

@kartiks16 thanks, I’ve checked the root files and they appear clean to me. I also have the latest wordpress already.

Ok @kartiks16 I’ve checked what you suggested and index.php within the wp-content folder was clean:

<?php
// Silence is golden.
?>

But I have noticed a whole lot of .html files in there that I have never created, all looking pretty dubious, so I manually removed those.

There was no functions.php file either… Should I be looking in the root folders for index.php and functions.php and doing the check there also?

Thanks very much @kartiks16

I’ll go in and make those changes you’ve suggested and report back.

@stephencottontail cheers mate. ??

Bump, for the value of this request!