Title: How to use wordpress-fix.php from SSH?
Last modified: August 19, 2016

---

# How to use wordpress-fix.php from SSH?

 *  [EricG](https://wordpress.org/support/users/ericg/)
 * (@ericg)
 * [15 years, 10 months ago](https://wordpress.org/support/topic/how-to-use-wordpress-fixphp-from-ssh/)
 * Well it looks like I got hit by that nasty wordpress exploit. My webhost has 
   suspended my site until I can get things cleaned up.
 * They suggested I run a file called wordpress-fix.php. I looked up the info for
   that, and it looks like I can do it one of two ways: 1) Run the php file from
   a browser at the root of my site (which I can’t do, because the site is suspended)
   or 2) use SSH to run that was described as the following:
 * `$ find ./ -name "*.php" -type f | \ xargs sed -i 's###g' 2>&1$ find ./ -name"*.
   php" -type f | \ xargs sed -i '/./,$!d' 2>&1`
 * I know pretty much nothing about SSH, but grabbed a free client and tried entering
   that line. All I get is -bash warnings about “command not found”. Can anyone 
   out there tell me what’s wrong with that line?
 * Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Darrell Schauss](https://wordpress.org/support/users/darrellonsite/)
 * (@darrellonsite)
 * [15 years, 10 months ago](https://wordpress.org/support/topic/how-to-use-wordpress-fixphp-from-ssh/#post-1610189)
 * Try without the $ at front. $ or # at front usually indicants the start of the
   command not something you actually type.
 * `find ./ -name "*.php" -type f | \ xargs sed -i 's###g' 2>&1$ find ./ -name "*.
   php" -type f | \ xargs sed -i '/./,$!d' 2>&1`
 * This should show you results and not actually change files. Not tested but I 
   do command like this with grep a lot.
    `find ./ -name "*.php" -type f | \ xargs
   grep -i 's###g' 2>&1$ find ./ -name "*.php" -type f | \ xargs grep -i '/./,$!
   d' 2>&1`
 *  Thread Starter [EricG](https://wordpress.org/support/users/ericg/)
 * (@ericg)
 * [15 years, 10 months ago](https://wordpress.org/support/topic/how-to-use-wordpress-fixphp-from-ssh/#post-1610193)
 * Thanks darrellonsite!
 * When I ran the second line from your post, I got these warnings:
 *     ```
       -bash:  xargs: command not found
       -bash: 1$: ambiguous redirect
       find: ./public_ftp: Permission denied
       ```
   
 * Does it matter how many spaces appear before xargs?
 *  Thread Starter [EricG](https://wordpress.org/support/users/ericg/)
 * (@ericg)
 * [15 years, 10 months ago](https://wordpress.org/support/topic/how-to-use-wordpress-fixphp-from-ssh/#post-1610276)
 * Got some info from my webhost about this, sort of.
 * “The grep we use to find the code on your account is: `find public_html/ -type
   f -size -10000k ! -wholename "*/cache/*" -print0 | xargs -0 grep -Hli aWYoZnVuY3Rpb25fZ`
 * I then added `|wc -l` to get a count of how many files (1,598)
    I also added 
   >> hackfiles2.txt so you have an updated list in your root directory.” ____
 * I’m able to run this command to get the same results they do, but that doesn’t
   fix anything. Anybody able to spot why I’m getting those -bash errors?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘How to use wordpress-fix.php from SSH?’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 2 participants
 * Last reply from: [EricG](https://wordpress.org/support/users/ericg/)
 * Last activity: [15 years, 10 months ago](https://wordpress.org/support/topic/how-to-use-wordpress-fixphp-from-ssh/#post-1610276)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics