fluxinull

I found at least part of our problem, it appears that the wordpress db user didn’t have alter privileges on the db. So the db upgrade to 2.3.2 and then 2.3.3 from a very old version, didn’t work completely. It didn’t fail completely either which is something that should be fixed.

We have done a force db upgrade and things are acting fairly normal now, we’ll see how the spam injection goes.

Version 2.3.3 and I’m still getting spam injection.

<font style=”position: absolute;overflow: hidden;height: 0;width: 0″>
absorption disposition and elimination of alcohol 1 g zithromax activities for alcohol and drug classes
etc..etc..etc..
</font>

This was mentioned in this thread previously but it seems to have been overlooked. This seems very similar to the iframe injection. It shows up in a post after it’s been published, no modify or edit noticed.