Soul Dancer

Aloha Rynald0s,

The only admin access to the site in question is me. Thanks for the plugin suggestion. Downloaded and installed sucuri-scanner. Scan found a malware issue. No other issues found.

Since I wrote last, all the sites I host on my Godaddy multi-site hosting platform now has the same malware. Godaddy places the resolution solely on me. I lack the understanding why Godaddy’s servers don’t block malware attacks like this.

The mystery continues. Thanks again for all your insights and suggestions!

Aloha Rynald0s, thanks for the assist. I followed your steps the second I received Stripe’s warning email. What remains a mystery is how that code (to include my API key) was accessed – and then – inserted into wordpress generated pages. This is the first time in five years I’ve encountered this kind of event.

Very odd! To correct this issue, via my database access, I
1) reset my wp-secret key (via https://api.www.ads-software.com/secret-key/1.1/salt/)
2) changed my user name
3) used the reset-password function with my new user name
4) cleared cache / cookies / restarted browser

Used reset password function sent via email

logged in okay.

Very strange!

Just encountered the same issue with my site.

Reset password -confirmed – check!

Cleared cache and cookies – check!

Restarted browser – check!

Cleared cache and cookies – again – check!

Same issue. Sounds like we have the same issue.

Oh! Yes! Will – awesome website btw!

Bookmarked for later use ??

Aloha Will, Mahalo (thanks) – yes – you’re on the right path. To secure things more, I decided to install a forum-style plugin. The solution you recommend is great if I had just one level of membership (guest / member). I realize I need something that’s member-access specific . . .

Thanks again for the post! I’ll tinker with user levels to fine-tune it even more ??

Aloha gVectors Team,

Good point. Based on your thoughts, then I’d say this plugin is “working as designed” thus rating of a 3.

Just uninstalled this plugin. Way too much work on keeping it working.

For the time being, I’ll mark this issue as resolved thanks to @ashiado! ??

Aloha Barry, thanks for the update. I LOVE the functions embedded in my iFeature Pro package. To be able to create an event and have it show up as a regular post – BRILLIANT. Sad that I’m unable to use this great app. Embedding widgets on the Events page is opposite of the layout I seek to achieve.

Mahalo for the suggestions.

Soul

Aloha @ashiado,

Thank you for all your diligence! Given the circumstances (launch of a massive site in days), I rolled-back to 3.7.1. When things slow a bit, I have a completely new site to build, I’ll test out 3.8 then to include this fix if needed and report back.

In gratitude I bow to all for all your help!

Soul

The only (poor) resolution I found is to roll back to 3.7.1.

I have six other sites running 3.7.1. and working just fine. (The images appear when I insert them from my ‘Media” files. They display on a published page and post.

I’m SO glad I didn’t update those sites!)

I DO NOT consider this work-around a permanent fix nor is this issue resolved.

@wpyogi, Mahalo for your support.

I deactivated ALL plugins and switched to a default theme. This did not work. When I go to create a new page or post, using ‘insert media’ (of which, I can see the thumbnail of the image), when I post the new page or post – the image does NOT display in the page or post.

The pages I created yesterday, the images display just fine. I did not install or update any plugins or change themes.

I do have “automatically update wordpress core” activated. Clearly, and update happened. This issue is NOT an issue on other sites that I have NOT updated to 3.8. Example:

https://paymewhatiamworth.com/archives/4407

I did NOT update to 3.8 and I can create new pages / posts with images using the same theme that I use for https://pwrnetworkllc.org.

While this is resolved, I’ll revert back to the prior WP release.

Mahalo @wpyogi . .

just posted a new item . . . Unresolved Image display

Aloha! I have the same issues above.

Example page: https://pwrnetworkllc.org/new

this image: https://pwrnetworkllc.org/wp-content/uploads/2013/12/blue-divider.jpg

displays just fine when you click on that link

the image will NOT display in both the dashboard (when creating a new post or page) nor will it show up in the live page.

My .htaccess file did not have:

<Files *.php>
deny from all
</Files>

in it . .

all that file has is:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

—

Other ideas most wecome!