techspecx

Thank you to Jason Ryan (@viablethought) for the correct way to remedy this – which should have not happened in the first place.

Go to Wordfence -> All Options -> Advanced Firewall Options -> Manually Refresh Rules and then run a new Scan

• This reply was modified 2 weeks, 2 days ago by techspecx.

From the shell you could do this:

Navigated to the site that had the issue:

cd /var/www/yourwebsite.com/public_html/wp-includes/blocks/block/

From there just enter in the command below and all files that needed to be removed will be removed:

rm -rf editor.css editor.min.css editor-rtl.css editor-rtl .min.css

From Wordfence dashboard:

Just click on the file and there should be a DELETE FILE button just press it.

I work in my shell so I do the shell route to make sure they are really deleted.

Regards.

TSX

• This reply was modified 4 months, 2 weeks ago by techspecx.

Hi Peter,

You are quite welcomed – a fantastic plugin like yours deserves to be recognized.

Cheers!

Thank you so much, that code worked. I wish you a great day and life!

• This reply was modified 7 months, 3 weeks ago by techspecx.

Solved.

Thank you for the very quick reply. Have a great day!

Regards.

Hello,

I added code to your theme’s functions.php and followed your instructions and deactivated and deleted the plugin but it still left residual code from your plugin in my DB.

How am I am suppose to remove that – that was my last question. It still leaves code in the wp_options table.

And what happened to this post – where are my replies?

Thanks Jan.

Rank Math Devs here is the pastebin:

https://pastebin.com/fnYfiYmN

• This reply was modified 1 year, 9 months ago by techspecx.

Hi Jan,

How do I edit the message so I can include the pastebin link?

Hello,

Thank you for replying back to me and your great support!

This is the SQL I ran, I replaced my DB name with MYDB for security purposes:

SELECT*FROMMYDB.wp_optionsWHERE(CONVERT(option_idUSING utf8)LIKE'%rank_math%'ORCONVERT(option_nameUSING utf8)LIKE'%rank_math%'ORCONVERT(option_valueUSING utf8)LIKE'%rank_math%'ORCONVERT(autoloadUSING utf8)LIKE'%rank_math%')

And it showed 2 matches in wp_options table under the option name of wp_user_roles and all my admin privileges are in that table also. So when you said it was okay I deleted that table. I had a DB backup but how do I remove the entries in the wp_options table?

This is what it looks like below:

b:1;s:23:”rank_math_edit_htaccess”;b:1;s:12:

It has numbers before it and after it and I am not certain what should be removed since there are other entries in there for other plugins.

There is also an entry under the option name called recently activated:

s:30:”seo-by-rank-math/rank-math.php”;

So I don’t know what to remove since there are other entries in there and I do not want to mess that up.

Could you help?

Regards,
techspecX

• This reply was modified 1 year, 9 months ago by Jan Dembowski.
• This reply was modified 1 year, 9 months ago by Jan Dembowski.

Hello,

Thank you again for your time and reply but when I removed them I lost my admin privileges and access to the back end to my site and I had no ability to get to the back end of WordPress, I was only able to work at the front end of WordPress.

I ran a SQL to find all rank math entries and when deleted that was when II lost access. So tell me where in your code you have the ability to have this happen when removing entries related to your plugin.

So it is not safe to remove these entries.

Any suggestions since this is not a good thing.

Regards,
techspecX

• This reply was modified 1 year, 9 months ago by techspecx.

Hello,

Thank you for your reply.

I found:

24 matches in wp_options
12 matches in wp_postmeta
4 matches in wp_usermeta

For a total of 40 matches.

rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_internal_links_processed rank_math_known_post_types a:4:{s:4:”post”;s:4:”post”;s:4:”page”;s:4:”page”;s… rank_math_modules a:11:{i:0;s:12:”link-counter”;i:1;s:9:”analytics”;… rank-math-options-general a:38:{s:19:”strip_category_base”;s:3:”off”;s:24:”a… rank-math-options-titles a:120:{s:24:”noindex_empty_taxonomies”;s:2:”on”;s:… rank-math-options-sitemap a:14:{s:14:”items_per_page”;i:200;s:14:”include_im… rank_math_version 1.0.107.3 rank_math_db_version 1 rank_math_install_date 1612529286 rank_math_registration_skip 1 rank_math_review_posts_converted 1 rank_math_wizard_completed 1 rank_math_is_configured 1 rank-math-options-instant-indexing a:1:{s:15:”bing_post_types”;a:2:{i:0;s:4:”post”;i:… rank_math_pro_notice_date 1676549178 _transient_rank_math_first_submenu_id rank-math rank_math_notifications a:1:{i:0;a:2:{s:7:”message”;s:421:”Rank Math has d… rank_math_viewed_seo_analyer 1 rank_math_review_notice_delayed 1 rank_math_review_notice_date 1676808393 rank_math_already_reviewed 1675598793 _transient__rank_math_site_type webshop rank_math_sitemap_cache_files a:0:{} rank_math_viewed_index_status 1 manageedit-pagecolumnshidden a:3:{i:0;s:0:””;i:1;s:15:”rank_math_title”;i:2;s:2… manageedit-oceanwp_librarycolumnshidden a:3:{i:0;s:0:””;i:1;s:15:”rank_math_title”;i:2;s:2… manageedit-e-landing-pagecolumnshidden a:3:{i:0;s:0:””;i:1;s:15:”rank_math_title”;i:2;s:2… manageedit-blogcolumnshidden a:3:{i:0;s:0:””;i:1;s:15:”rank_math_title”;i:2;s:2…

So it is safe to remove all these leftovers?

Regards,
techspecX

Hello @threadi,

Thank you for the most clear and concise answer I have ever received in a forum. My next step is to clear up the DB and with your helpful answer I can. Thank you and have a great life.

Regards,
techspecX

Hello,

I would like to know also why I keep getting a report saying that these files have been modified. I ran a scan and have a secondary security plugin but everything is clean. I have 9 websites and it is just this one website that these files keep getting modified:

wp-content/wflogs/ips.php
wp-content/wflogs/config.php
wp-content/wflogs/attack-data.php
wp-content/wflogs/wafRules.rules
wp-content/wflogs/rules.php

Thank you.

Regards.

Hey Jan,

Thanks for your reply no reason to be sorry. I just thought it would be a simple process of just removing my dot com name from my entry.

Thanks again.

Regards.

Hi Yann,

Could you delete my initial post. It contains my domain name which I forgot to delete.

Thanks.