dailyhubbub

It also, said I had to edit the htaccess file. Can anyone give me some advice on how to do that? Not got a clue where it even is. I’m hosting with GoDaddy

I tried changing briefly (not really considering the consequences) and found that the old links did not work

Yeah, I totally wiped. Wasn’t taking any chances. I did obviously have to then overwrite some files with the old ones but I think they’re all clean. Fingers crossed.

Ok, cool. Where could there be rogue files now that I have reinstalled everything?

Yep, was a blank space at the top. And some other stuff. Finally have the site up and running again.

Just deleted absolutely everything. Reinstalled WordPress, put the old config.php file back in minus unwanted code and then reinstalled my theme and shoved all my images back in the right place.

Was actually quite straightforward in the end, just took me absolutely HOURS seeing as I didn’t really know what I was doing or how a lot of the back end stuff worked.

Thanks everyone so much for helping out, especially @rvoodoo Couldn’t have done it without you.

Now I just need to try and make sure it doesn’t happen again.

If anyone’s interested, the site is https://www.dailyhubbub.co.uk – it’s a UK satirical news site (note: this is not me promoting the site, just letting everyone know where their help and advice has been put to such good use ??

Sorry, thats wrong. When i try and load the site I get a blank white screen, when I try and access my wp-admin area I get the following message:

Warning: Cannot modify header information – headers already sent by (output started at /home/content/35/5249835/html/wp-config.php:2) in /home/content/35/5249835/html/wp-includes/pluggable.php on line 868

@rvoodoo

I reinstalled wordpress and then replaced config.php with my old one (minus the dodgey code) but when I do this and try and load my site, I get this:

Warning: Cannot modify header information – headers already sent by (output started at /home/content/35/5249835/html/wp-config.php:2) in /home/content/35/5249835/html/wp-includes/functions.php on line 2861
Error establishing a database connection

Ok, I will do that. Thanks everyone for your help.

Can someone give me a little crash course in looking at my access log. Not really sure how to find the rogue files

Ok, forgive me for being uneducated but I only just recently installed my theme. I haven’t made many changes to it so rather than go through every file and then going through the standard reading, would it not be easier to reinstall wordpress, reinstall the theme, and then can I not somehow use my old database to get my posts back? I ran a search in the database, and can’t find a trace of the code that’s appearing in my php files. No doubt there are a million reasons why I can’t or shouldn’t do this, but thought I’d ask.

@peteroliverdavies

yep, same thing. It seems to load on my my macbook but it loads as though the css isn’t working. On windows, it appears for a second then goes blank

What really p****s me off is that I opted to use WordPress to avoid all the complicated HTML web design geekery. I have so much respect for people that have the patience to learn all this stuff, but it’s just not for me. And now this has happened and I’m having to spend a whole day trawling through forums and articles in order to learn what exactly is going on. So what is exactly is the point in WordPress. I just can’t believe it’s so easy for hackers to get in and do this. The number of similar posts on here within the last few days is absolutely outrageous

I’m thinking it might just be easier to do a fresh install of wordpress and of my theme. Whats the best way to retrieve all my posts? I’ve exported my database. Is that the best place to find them?

That piece of script is in literally every php file. Is there a quick way of removing it from all files, rather than opening every single one?

My url is https://www.dailyhubbub.co.uk by the way. No idea what news.hermison.com is!

I am having exactly the same problem. My site seems to have a trojan. When the homepage is loading it says a trojan has been found in “https://news.hermison.com/” file. When the homepage is loading u can see in the bottom left on firefox that it is trying to transfer from this site! I have logged into my files on GoDaddy and in every php file there is about 20 lines of complete gibberish. I’m really not knowledgable enough to deal with this. I don’t know where to start! Have tried deleting the gibberish in index, header, footer and sidebar but suspect the problem runs a bit deeper.