Rachel Baker

Any thread that offers any service for money can be closed at any time. We are not against paid services but these forums are not the right place for them. Please use WP Jobs instead.

Have you contacted your hosting provider? They would have access to log files that can help track down the vulnerability leading to the hacking.

Check for new users created.

Read all of the information here: https://codex.www.ads-software.com/FAQ_My_site_was_hacked

Another helpful resource is the Sucuri Site Scanner: https://sitecheck.sucuri.net/scanner/

It sounds as though you have a permission issue, which is why the TwentyTen theme couldn’t be removed.

the correct permissions scheme is simple to understand.

All files should be owned by the actual user’s account, not the user account used for the httpd process.
Group ownership is irrelevant, unless there’s specific group requirements for the web-server process permissions checking. This is not usually the case.
All directories should be 755 or 750.
All files should be 644 or 640. Exception: wp-config.php should be 600 to prevent other users on the server from reading it.
No directories should ever be given 777, even upload directories. Since the php process is running as the owner of the files, it gets the owners permissions and can write to even a 755 directory.

More info here: https://codex.www.ads-software.com/Changing_File_Permissions#Using_an_FTP_Client

What was the code you were told to add, and where did you add the code?

Is your web hosting server running Linux & Apache or Microsoft Windows & IIS? If your server is running Windows & IIS there is no .htaccess file.

Have you changed anything recently? Perhaps installed a new plugin? Or changed your site url?

My first thought is you need to declare the global $wpquery inside your class method.

ghp123,

You would just need to add a conditional like:

<?php $your_custom_field = get_post_meta($post->ID, 'your_custom_meta', true);
if ( $your_custom_field == 'textstring' ) {
echo $your_custom_field;
} ?>

Are you using a caching plugin?

@bea,

Just a thought, but why not have all of the authors post to siteA and run some sort of migration script to move the content to siteB?

There hurdles with things like comments, etc but that would be the approach I would take.

Tracey,

Are you running a WordPress version below 3.4, such as 3.3 or lower?

Hello Dreate,

Can you disable the hwe_manage_business plugin?

Are you using wp_update_meta to create/add content to the meta key?
https://codex.www.ads-software.com/Function_Reference/update_post_meta

Sorry to hear about your sites getting hacked.
I know it can be very frustrating.

Here is some info to get you started on how to clean up your sites;
https://codex.www.ads-software.com/FAQ_My_site_was_hacked/

Here is a site scanner that can help locate the cause of the infection:
https://sitecheck.sucuri.net/scanner/

Do you have a .htaccess file in your webapps subfolder?