secretfocus

Installing the classic editor plugin solved the problems. Thanks.

Thanks for your reply.

As far as I know I am using the classic editor and I will try to contact the theme author about this.

I think I am using a child theme but not being an expert I may have difficulty with this in regard to the CSS.

Hi, In the media library thay all appear https on the website they appear http. The majority of the images are not showing these anomoly. Does your manual/backend advice still apply. Thank G

I have a similar issue on marchesdigital.co.uk My padlock has a yellow triangle and wnhnopadlock brings up 21 insecurities – all images. Why does the plugin not deal with these and if it can’t what do I do – I am no expert?

nmmartin928 and MRomine

Did using the removal tool work OK for you with no problems?

Got it sorted!

Thanks Caroline. Anywhere in particular – note I am a novice with html!

They are all December 2010 or 2011 and in public.html

@esmi. Replacing the php files and I see that there are no replacements for some = feed, pass, rdf, register, rss, rss2.

Do I leave the existing files or delete them?

OK – thanks for all the help. I guess I just wait for HostPapa to do their stuff now!

@mvandemar. The phot version used by HostPapa is Version information: 3.4.11.1, latest stable version: 3.5.3.

I have now replaced index.php in public.html but still no page display. I have contacted HP to inform them of the repair.

By coincidence I had started looking for a new host and HostGator seemed to have what I need. I think this incident will bring that forward!

@esmi. Your post about deleting root files has confused me. Had a long look through cpanel file manager (public.html) and cannot see anything like .htaccess files. In addition, the files etc. that are in there are licenses, read me, sitemap.xml, text/html and what I assume are important php files.

There is another folder for access logs at the same level to public.html but this is completely empty. Can you advise me further on this?

Done that and the hacked by hacker line in header.php has gone.
However, my website still does not display properly ans still has the white page saying hacked by hacker on it.

Is it likely that HostPapa need to now about the repair?

The good news is that I have uploaded wp-admin & wp-includes into my cpanel file manager.

I have also deleted Contact Form 7 plugin to remove one area of potential back door hacking – I spent a lot of time working on this immediately before the hack and will re-install it again later

My next task is to re-install my theme (Sixhours) but once again how to do this is a problem as there seems to be no delete facility unless I substitute a different theme and the re-install it.

Would this work?

@mvandemar I don’t see wp-config. UPDATE _ Found it.

@esmi I added the ftp credentials copied from HostPapa.

Latest: I have managed to delete the wp-admin folder from my cpanel file manager and can do the same for wp_includes – but not yet. However, the upload system will net let me upload a replacement folder – it only seems to permit the upload of individual files. Do I have to this file after file to rebuild the wp-admin folder?

YES – I got the FTP details from HostPapa