Moodles

yorman, thanks for the help.

Bluehost tried raising the php version to 7.0 but it broke the theme, however when he changed it back to 5.62 that somehow registered correctly with Sucuri. So no more error message and the app is up to speed now. Thanks for your input, I wasn’t sure where the problem lay.

Well, I didn’t get a comment on the php above, but I have replaced the index.php files anyway without incident for the site.

In case this would help anyone else,

I found a rogue plug-in in both the root and the subdomain installations of WordPress on this domain.

There were index.php files inside of wp-includes for both sites that contained a large blocked of backwards coded php script that in part was looking for writable files or folders in that directory, and also appeared to be setting up false user registrations.

The theme’s function.php contained a script, just past the “don’t edit below here” part that placed several lines of code in the header, plus it referred to two javascript filesm these falsely referencing cloudflare, but sucuri named as malware.

And earlier, before this actual attack, the hackers were able to change the setting “no one can register” to “anyone can register” and there were a number of fake users entered for the subdomain WordPress.

I have also take steps post-hack as in several how-to articles and as t-p noted above.

Hi, thanks for the response. I’ve been working on those points you listed, and have used sucuri.net to scan. I was specifically asking about those index.php file text I listed above.

Is that legit or spam code?

No, unfortunately not.
And I haven’t had the time to mess with this, either.
I just deactivated the plugin. ??

I have posted in the Relocate Uploads support forum.
Apparently recent updates to WP have caused problems with the plugin; it has a new developer who has recently “adopted” it.
He is working on an update. Hopefully the update will address this.

My apologies, it is ReLOCATE Uploads

https://www.ads-software.com/plugins/relocate-upload/

I am happy to report the WP Document Revisions does the trick.
It’s got over the top features, I just need this one.

I tested by sending the link to a friend, she got a 404 error.
When I attempted the link in the browser where I am logged in to the page, the file downloads immediately.

I am testing WP Document Revisions and will report back.

This page tells how to do this with htaccess, but I only want some PDF files to be secure, not all of them..

https://wpguru.co.uk/2012/01/how-to-prevent-direct-file-access-in-your-wp-content-directory/

I am having trouble with table cells, rows, selection also.
It can’t limit itself and the selection “bleeds” out into the rest of the post, outside the table even.

Very frustrating; it’s a great plugin.

I’m also using Firefox 5/Windows 7 but also tried it with I.E. 9 and the same thing happened.

I also tried deactivating and then activating again, no improvement.

I just installed the plugin for the first time. It hung up and did not finish until, on the Advanced tab, I raised the Server load limit which was at 4.00 minutes and the note to the right indicated it had needed over 9 so I guess that’s why it hung up (there are a lot of documents linked on the site as it is an investors’ dataroom). I purposely put a broken link on the site to check the plugin and it had not found this broken link.

I raised the server load limit to 14.00 and within about 90 seconds it finished the job and correctly reported the broken link.

I am new at the plugin but I would think you could set the server load limit very low and then raise it when you want to run the check — I am not saying that is necessary, only suggesting it for those who’ve had server crashing issues. It found the broken link just fine, and I need this plugin to keep track of all those documents so will limit the server load to just past what the plugin says is needed and also increase the time (number of hours — on the General tab) between checks as the site’s content isn’t changed all that often.

You could also, depending on your needs, limit what the plugin checks on the “Looks for Links In” tab. I just put mine to published posts and pages, as I am not using the blogroll or comments.

The text on the home page is a post, not a page.

We can’t see the page, that’s a link to a preview. The page has to be published for people to view it. Only logged in people (you) can see the preview.

You’re talking about jump links.

A plugin can’t link to anything unless there’s something there for it to link to. The anchor link still has to be there, and be named something, and then the link TO that place created and put where you want it.

Jump links aren’t that hard.

Decide on a section, put a name link there:

<a name="sectionName"></a>

Then elsewhere, put the jumping link in:

<a href="#sectionName">Go to my Section</a>

More info:

https://www.htmlgoodies.com/tutorials/getting_started/article.php/3479511/So-You-Want-A-Page-Jump-Huh.htm

Sometimes, to make the jump land where you want it, you need to place the first one, the name tag, a little higher up in the code that exactly AT that point.

hope this helps…

Not sure if this is what you mean, but if you lost everything and want a page that lists recent posts, you will have to create it, then you can link to it.

https://codex.www.ads-software.com/Function_Reference/wp_get_recent_posts