solutionsphp

I’ve had a couple of sites get hit with this over the past few days. WordPress and plugins are all up to date, and some sites that were hit are not running WordPress at all. No issues with my local system. I haven’t found the hole yet.

@somveritas: Go through every directory and look at the last modified dates on the files. This is one way to locate hacked files, however some hacks don’t leave the footprint of a modified date. To be safer then, delete all files you can off your server and re-upload them fresh. This includes theme files (the header.php file was likely injected with the IFRAME code.) If you’re using a cache plugin, delete the cache, and delete your browser cache too. Visit your site and verify that the injected code is gone.

This won’t close the security hole on your site, but it will help clean up the injected code.

I didn’t get an answer but I figured it out by modifying some of the skin CSS files. I don’t recall the exact changes, but it hinged on realizing that the custom skin CSS was not overriding the default skin CSS. You can see it in action here.

I solved this by creating a custom skin, but I think there’s an error in the admin of this plugins since I couldn’t control the background color through the settings page.

I’m also having an issue with SSL, but the problem is different. My site is all HTTP except for certain pages, which are HTTPS. (I’m using a plugin to force SSL on these pages.) On a secured page, the slider is present with no errors, but ALL images are shown at once, like a gallery presentation, with no slider functionality. I’m sad, this plugin looked perfect for my needs.

I wound up modifying Yoast’s WordPress SEO, maybe using the same method as is suggested in the Ecwid forums: I disabled canonical URL support in it. (I stuck with Yoast’s plugin because I couldn’t find a way to export the settings to All In One SEO.)

I solved this problem by switching to the Yoast SEO plugin but have now learned through the Ecwid forums that this plugin negatively interacts with Ecwid, by setting an “incorrect” canonical URL preventing indexing of the store.

Since I use HeadSpace2 on all my other sites and would prefer to use it over All In One SEO, I disabled Yoast SEO and re-enabled HeadSpace2 just to see if I could get it working. Unfortunately the same problem happens: blank Ecwid store with HeadSpace2 enabled.

I haven’t tried this with a clean WP install and no other plugins, so the problem must be a combination of settings and plugins, as you said.

Off to install All In One SEO… I hope this plugin “plays nice” with Ecwid!

Yes, I have this issue with Yoast SEO and Ecwid shopping cart. By setting the canonical URL, Yoast prevents the Ecwid cart pages from being indexed.

Thank you for looking into this. I’m using a custom theme that’s a child theme of twentyten. I disabled all other plugins when testing, and it was switching HeadSpace2 on and off that made the difference of the store page loading or not. Given that you couldn’t replicate this though, it sounds like some other variable in my setup is what triggered the problem. I went for the quick remedy and switched from HeadSpace2 to the Yoast WP SEO plugin, so I no longer have the HeadSpace2 settings to provide you. HeadSpace2 is pretty popular so if no one else is reporting issues, we can probably mark this as resolved. Thanks again!

Ran the new WPEC upgrade and… still couldn’t get it working. The 3 or 4 bugs I was tracking were not fixed with the new release. I’m not new to WP or e-commerce, but I just could not get WPEC/Gold Cart running. I’d get past one bug and run smack into another. And even if I could get it running, I’d be really hesitant to run future upgrades–everything seems so fragile with WPEC! After countless hours of fruitless labor, we pulled the plug. No refund for the Gold Cart plugin available. Nice biz model.

WooCommerce – untested
JigoShop – didn’t half the team leave for Woo?
Shopp – I’ve heard it’s as buggy as WPEC?

No perfect options.

I’d prefer a cart that wasn’t all AJAX, but decided to take Ecwid for a spin for ease of use and low entry cost. After isolating a plugin incompatibility (doesn’t play nice with HeadSpace2), installation went fine. A couple if hours later, a storefront!

I fully concur. I did a lot of research about WP e-commerce plugins and WPEC looked like the best, but I’ve been really disappointed. The CSS is awful and has cost me a lot of hours, I’ve come across bugs that people have complained about since June in their forums… with no responses. Support staff have attitude. Given the choice again, I’d stay far away from WPEC.

Same issue here.

Yes, I’m running a custom query, and forgot about wp_reset_query() (was using rewind_posts.) Adding this after my loop totally fixed my problem. Thank you!

I’m having this issue as well. Show on selected with Front Page and nothing else isn’t working for me. I also tried applying the patch here, along with several different variations of the target URL format, to no avail: https://www.ads-software.com/support/topic/plugin-widget-context?replies=25

The plugin is working as expected on other pages/posts, just not my static front page.

UPDATE: This problem is being caused by my use of is_front_page() just below the loop. If I remove that, Widget Context will target the front page as expected. I need to use that function though, so I’m looking for a workaround. Any ideas?

Hmm, guar’s solution doesn’t seem to work for me. I’m using WordPress 3.1.1 with the Backstage theme from WooThemes. I put the code in the functions.php file, and regenerated the xml file, but the custom post types don’t show up in the sitemap.

I tried the beta plugin but it failed at generating the XML file completely.
https://www.ads-software.com/support/topic/plugin-google-xml-sitemaps-early-testers-wanted?replies=157

Can you elaborate on what’s not working with Headspace2 and WP 3.1?