Title: .jpg injected into all https urls Last modified: December 17, 2019 --- # .jpg injected into all https urls * Resolved [msgarvin](https://wordpress.org/support/users/msgarvin/) * (@msgarvin) * [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/) * Yesterday, I installed PNG to JPG to convert screenshot pngs that are causing page speed errors. After testing one image with successful results, I tested 5 images. The web site, which is a dev/staging environment corrupted. The admin panel and the front end were replaced with html. The html reveals that every link to images, nav, files etc, has been corrupted with an injection of ‘.jpg’ after https: and in between the forward slashes. This has the clear marking of a SQL injection. The server host has not found any infection. * Has anyone else experienced this behavior. * WP 5.3.1 Porto Theme and child (current) PHP 7.2 MySQL 5.1? Apache servers Thanks Michael * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fjpg-injected-into-all-https-urls%2F%3Foutput_format%3Dmd&locale=en_US) to see the link]_ Viewing 4 replies - 1 through 4 (of 4 total) * Plugin Author [kubiq](https://wordpress.org/support/users/kubiq/) * (@kubiq) * [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/#post-12248298) * Hi, sorry for that, but I’ve tested this plugin in many different environments and different setups like subdomain or subdirectory installations and I’ve never experienced something like this. * This plugin replace image filename in database and it use standard WP functions( wp_get_attachment_url, get_attached_file, wp_get_attachment_metadata ) to receive all needed data like, filename, URL etc… One of this functions probably return wrong data and that can happen only if your setup is corrupted. * Just restore your database backup and everything should be ok, but anyway, I’m really curious how you install WordPress. Maybe you can share some steps, how you do it? Do you have classic folders hierarchy? * Thread Starter [msgarvin](https://wordpress.org/support/users/msgarvin/) * (@msgarvin) * [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/#post-12248528) * Thank you for your assistance so rapidly. Very much appreciated. * I have recently taken over on this website to assist with resolving numerous problems. I myself am not a programmer, just a detailed analyst. The installation is dirty. When I first looked at it, there were 7 themes installed, three had been configured and abandoned. There were some 50 plus plugins of various stages of overlap and conflict. Systematically, I moved the team from doing anything to the live site and work exclusively on this clone site. Since that effort stabilized, I have worked to remove everything that is not mandatory by the current theme and functionality. All extraneous themes and plugins have been removed and the data tables optimized. Page speed and other tests continued to show improvement as page functionality with WPBakery was streamlined and improved. Images are the most pressing issue at the moment which is why your plugin was sought. * While this is ongoing development, it has been my plan to create a clean installation of wordpress and the Porto themes so that all of the plugins and theme files can operate without any remnants or junk. From your message, it sounds like that should take precedence when I recover the current clone912 staging env. * I’ll let you know if the Db restore takes care of the ‘https:/.jgp/.jpgclone912…..’ issue. * Thanks again for your assistance. * Thread Starter [msgarvin](https://wordpress.org/support/users/msgarvin/) * (@msgarvin) * [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/#post-12248644) * Kubiq, Thanks again for your response. Even though restoring a previous image of the site did not work, restoring a previous Db file did. The staging environment is whole – ish again. * Thanks Michael * Plugin Author [kubiq](https://wordpress.org/support/users/kubiq/) * (@kubiq) * [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/#post-12249387) * Hi, yes, as I wrote, you need to restore DB 😉 Maybe you can try my other plugin` Images to WebP`, it will create additional .webp versions of every image and serve it over .htaccess, so images and DB is not touched. .webp images are even smaller than JPG Viewing 4 replies - 1 through 4 (of 4 total) The topic ‘.jpg injected into all https urls’ is closed to new replies. * ![](https://ps.w.org/png-to-jpg/assets/icon-256x256.png?rev=1484560) * [PNG to JPG](https://wordpress.org/plugins/png-to-jpg/) * [Support Threads](https://wordpress.org/support/plugin/png-to-jpg/) * [Active Topics](https://wordpress.org/support/plugin/png-to-jpg/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/png-to-jpg/unresolved/) * [Reviews](https://wordpress.org/support/plugin/png-to-jpg/reviews/) ## Tags * [sql injection](https://wordpress.org/support/topic-tag/sql-injection/) * 4 replies * 2 participants * Last reply from: [kubiq](https://wordpress.org/support/users/kubiq/) * Last activity: [6 years, 5 months ago](https://wordpress.org/support/topic/jpg-injected-into-all-https-urls/#post-12249387) * Status: resolved