shawn00m

That did the trick. Syntax, syntax, syntax. It’ll kill you every time!

Thank you!
-Shawn

Thanks for your response Heinrichdsf. I was able to fix the problem with the controls with an .htaccess hack the developer pointed out. Those missing sermons are missing audio, that’s why they don’t appear.

Thank you for your replay. Here is the site:
https://238.20d.myftpupload.com/

What classes am I looking for to change the indentation?

Thank you
-Shawn

Thanks Jeremy. Here’s my URL:
https://www.gunsandammo.info

Here’s the screenshot:
https://snag.gy/gI8DB.jpg

Let me know if there’s something I did wrong or a fix. I appreciate it!

Thanks for the reply! I’ll look forward to the updates.

I get something similar:

Warning: require(D:\Hosting\6190888\html\wp-content\plugins\backwpup/sdk/SwiftMailer/swift_required.php) [function.require]: failed to open stream: No such file or directory in D:\Hosting\6190888\html\wp-content\plugins\backwpup\inc\class-destination-email.php on line 6

Fatal error: require() [function.require]: Failed opening required ‘D:\Hosting\6190888\html\wp-content\plugins\backwpup/sdk/SwiftMailer/swift_required.php’ (include_path=’.;C:\php5\pear’) in D:\Hosting\6190888\html\wp-content\plugins\backwpup\inc\class-destination-email.php on line 6

ivanyez, Did you just delete the plugin folder via FTP? I’m having the same problem with one of my sites.

Ben, are you able to log back in? I’m wondering if this is why I can’t get back in to the WordPress admin. I have custom post types, too, and suddenly I can’t get back to my login URL. Every time I try to enter the login URL I’m redirected to the not found page.

I’m sorry, but I’m really hoping someone can help me with this. I’m actually having problems accessing my site login and I swore I had the right login path written down. But it’s not working. Can you tell me how you are able to bypass this?

Another suggestion. If you’re going to implement all or most of the security measures, the biggest problem I have had has been when I change the wp-content folder name. This caused many things to disappear, links break, etc. There is a great plugin called Search and Replace that you can quickly use to replace any references to images, etc. and get them back.

I’ve now implemented this security plugin on a half dozen LIVE sites, and have had no problems when I go through step by step and backup the database before every change. So far, I’m very happy with this plugin.

The author did warn not to use it on an existing site. Not that I don’t feel your pain. But I made note of that when I read it.

esmi, yes, it was April 18, not May 18. I wish I had a time machine to go back and catch the bums that did this. Thanks for your info. The Hardening WordPress info is helpful.

I also found a plugin called Better WP Security. It does many of the things suggested on that page. Are you – or anyone reading this – familiar with it?

Thanks esmi. There were a total of 13 sites hacked on 5 different hosting accounts – all of them at GoDaddy – all at 5:17pm on May 18.

A colleague of mine had the same issue the next day with 11 of his WP sites on 4 different hosting accounts – again all at GoDaddy.

The big difference between his attacks and mine is that his hack included the installation of content and links related to ED medication. This caused one of his sites to get flagged by Google. None of mine experienced that, but the method was otherwise almost identical.

While I’m trying to get help to prevent this, I also am trying to alert people to look at their sites for a similar attack. I wouldn’t have known I was hacked if my colleague didn’t tell me about his hacks. After seeing his sites, I checked my own and found the offending code.

Seacoast Web Design, I’m not understanding your comment.

To others, I know my site was hacked. 13 of my sites were hacked on the same day at the same time over various hosting accounts. This isn’t one site with one PW.

My questions:

Has anyone ever experienced something similar?
Any suggestions on how all of the sites were hit simultaneously?
Any advice to prevent it from happening again?

Thank you.

Thank you for your reply. Here is a link to the file at pastebin:
[Moderator Note: Removed link to code used to exploit site]