chabotjeff

Nice gallery plug-in by the way ??

Michael it’s free, isn’t it? I don’t see why the developer shouldn’t be able to make some money off it. The update does have issues though.

I found this file also .htaccess.preinstall on a broken WordPress site…
But there is no answer really to what it does. It seems like something a plug-in like quick-setup may use, or maybe from the hosting service.

I didn’t have any WooCommerce plug-ins installed but got the same error. I think it may be because the new version of WooCommerce 2.1.9 requires WordPress 3.8 or higher.

ahh. thanks again. one of the articles mentions that the code placed into the “name” field for users was to make the users invisible.

Is upgrading from the Dash secure? I always feel more comfortable moving files myself…especially the plug-ins. I feel like plug-ins may be entries for hackers.

You saved me…thanks! The lorelle post lead me to this article: https://www.thinkerati.com/whiterabbit/seo-and-online-marketing/wordpress-invisible-administrator-hack/#comment-258

I had an invisible admin and was able to delete using the instructions. This hack was interesting because of two reasons:

#1. I have WP 2.8.4. So either the hack was from an earlier version of WP or 2.8.4 is susceptible.

#2. The “name” of the user (not “username”) was this long string of code that started with…

<div id=”user_superuser”><script language=”JavaScript”> var setUserName

(I obviously won’t post anymore of it.)

ANY IDEA what damage could have been done or how to investigate on? I’m going to look into the permalinks, and look at some of the URLs of archives. Anywhere else to look?

hd-report.com

anyone know about any malicious code that could have been introduced?

dude that is too funny. you mean you just disabled it? I can’t see what you checked.

I’m not so sure All-in-One SEO is relevant any more either, seeing as though meta keywords are useless now.

My site got nailed too. I didn’t think of anything when I had a couple “admin” users added to the site. Thought it was just spam. But I had two additional “admins” with “contributer” status and they were able to change the Permalinks url structure. Argghh.

thanks for the suggestions! trying them out.

I figured this out – just reinstalled. however, try headspace –
https://urbangiraffe.com/plugins/headspace2/ – getting much more support.

I can understand if they don’t get $ support, it must be tough to maintain. I suggest checking out Headspace – a newer SEO plug-in that does a lot more.
https://urbangiraffe.com/plugins/headspace2/

All-in-one does work great when configured correctly, but if they are no longer going to support it may be advisable to migrate to headspace.

On the placement of the meta tags from all in one – I don’t think it matters. The search bots will still seem them even if they are further down the list that your normal meta tag placement.

Question regarding the lack of meta name=”title” though (only the <title> shows up). Did the plug-in creators just leave this out or is there proof that one title tag is enough for the search bots?