jeffersonpowers

I already have a child theme in place, thank you.

My knowledge of PHP is limited, but it appears that both posts and pages use content.php to display content, is that correct? content.php in turn calls a function to populate the entry-meta section. What I can’t figure out is why single posts have author and date info in entry-meta, but pages do not.

Thanks for the quick answer.

When I created the new database I gave it a new password, so no worries there. Thanks!

As hacking attempts go, this one seems rather ham-fisted, as Wordfence seems to have caught it right away. However, I still want to take it seriously.

Here’s what I’ve done:

– Changed the hosting account FTP/SFTP password.
– Deleted the existing WordPress install.
– Restored the WordPress files from a backup taken before the problem.
– Created a new database with a backup taken before the problem (rather than restoring to the existing database).
– Deleted and re-created all the User accounts, with new passwords.

I’m concerned about using DISALLOW_FILE_EDIT because I’m afraid it might interfere with WP Super Cache. Does anyone have any experience with this?

Are there any other security measures anyone would recommend?

Thanks in advance for all your help!

They weren’t in a particular theme folder, just in wp-content/themes.

That worked perfectly, thank you so much for your help.

Thanks very much for your reply, but I’m afraid I’m not really a coder, so I didn’t really follow any of that. Can you point me to an example of code that can be added to my theme functions that will do this?

Do we know for sure that version 2.12 isn’t creating any of the problems that 2.10 and 2.11 did? I would love to hear from anyone who has installed 2.12.

Something similar happened to me. After installing the update, my site completely crashes and I get the following error message:

Fatal error: Class ‘PublishEventsManager’ not found in (file path) wp-content/plugins/autochimp/autochimp-plugins.php on line 220

After deleting the plugin I tried a new install, with the same result as soon as the plugin was activated.

My server is using PHP 5.3.

Can you please re-upload the previous version (2.02) until you are able to fix this problem? Thanks.

Thank you so much for your help.

Do you know if there is a way to change those user credentials, either within WordPress or on the server, so that WordPress can write to the site’s public_html?

Thanks again!

Thank you so much for all your help, but unfortunately adding that code didn’t do anything.

I think I have this client convinced to let me rebuild his entire site in WP, so this issue shouldn’t be a problem (although if anyone comes up with a solution I’d love to hear it!).

Thanks again for your time and advice.

the .htaccess file contains the following:

RewriteEngine on
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]
RewriteCond %{REQUEST_URI} ^/[^\.]+[^/]$
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1/ [R=301,L]
RewriteRule ^([^/\.]+)/?$ /index.php?link=$1 [L]
RewriteRule ^([^/\.]+)/([^/\.]+)/?$ /index.php?link=$1&page=$2 [L]
RewriteRule ^([^/\.]+)/([^/\.]+)/([^/\.]+)/?$ /index.php?link=$1&page=$2&align=$3 [L]

Without it, none of the main site’s pages will load other than the front page.

The main site is not a WP site. It’s a PHP site that someone else did originally. I’m working on the site now and unfortunately i don’t know much about PHP so my additions to the site have been a bit patchwork.

Removing the .htaccess file fixed the wordpress problems, but now none of the main site’s links work.

Is there a way to modify the .htaccess file so it won’t interfere with WordPress?

I never got a chance to put in the site URL – wp-admin/install.php doesn’t ask for it, and I can even get to the dashboard.