Forum Replies Created

Viewing 15 replies - 16 through 30 (of 31 total)
  • Forum: Plugins
    In reply to: Changing Text in a widget
    dvwp

    (@dvwordpress)

    you can edit your plug in’s pages through the dashboard. might want to make a back up first. but then go through the pages for that plug in, do a search for “A password will be mailed…” find that text in the document and carefully replace it with what ever you like. that should do it, as long as you ONLY replace the text, and not delete the line or something like that. hope this helps.

    dvwp

    (@dvwordpress)

    hey patti

    you shouldn’t have to do anything more. if you want to check if the plug in is loading the analytics, just go to one of your blog pages in a browser, view the source code and see if the analytics is at the bottom of the code.

    Thread Starter dvwp

    (@dvwordpress)

    if your site was hacked and godaddy is your host you may have this entry in your database. it may also be legit, am still investigating.

    Forum: Plugins
    In reply to: Trojan in my site?!
    dvwp

    (@dvwordpress)

    ps: also see this

    Forum: Plugins
    In reply to: Trojan in my site?!
    dvwp

    (@dvwordpress)

    hey eman, the way to check your pages as you repair them going forward is to view them in a browser and check the source code. i believe you will see unwanted code in your footer. i believe the function of the crap added to your site is meant to generate this footer code. basically, you are going to find the hack has been added to all php files on your site.

    as rvoodoo says, make sure your clean up is thorough, otherwise the code will return.

    dvwp

    (@dvwordpress)

    try this

    dvwp

    (@dvwordpress)

    one way is to make a gif or png of the rule the size and width you want and then insert it into place using the text widget.

    that has worked for me.

    best wishes

    dvwp

    (@dvwordpress)

    allenews:

    do what i suggest and deactivate all your plugins. still get the virus code? then you missed a php file.

    virus code gone when plug ins deactivated?
    upload new versions of the plug-ins.

    dvwp

    (@dvwordpress)

    ps. it is my theory that all wp blogs with weak passwords hosted at godaddy are probably victims of this hack.

    fyi all in one seo is the only plugin which i share with both of the above lists, if that is informative in anyway.

    dvwp

    (@dvwordpress)

    our site is at godaddy as well, but a quick check showed other files and directories were untouched. a look at the logs during the days around the time the site got hacked show posts from china and korea. google analytics also shows a visit from germany. this is unusual as our site is just starting, so the logs are pretty easy to go through since we’re not publicly known yet, especially internationally.

    it seems that this particular hack adds the base64 crap at the top of all your php pages. this (i’m guessing) is a coded script to add an encoded script at the end of your page. (this can be viewed by looking at your page source in a browser.)

    another way to check things is to make all plug-ins inactive. when this is done you will probably see the hacked script removed from your pages when checked with your browser.

    sorry not to be more helpful, but this is my first time hunting for hackers! 🙂

    dvwp

    (@dvwordpress)

    your site has definitely been hacked, i had the same problem. if you view your page’s source in a browser you will see the hacked code script at the bottom of the page. this is a pretty weak encoding as you can see, it inserts three characters between the actual code.

    ie, ….d*%@o*%@c*%@u*%@m*%@e*%@n*%@t… = “document”

    this is where the ninoplas.com crap is located.

    does anyone know what this code does? and who benefits? and who is ninoplas.com?

    Thread Starter dvwp

    (@dvwordpress)

    hello again

    i resolved this problem by uploading my wp-includes folder and its contents from my back-up.

    my theory that some files were corrupted and/or uploaded incorrectly when my server dropped my connection during an upload.

    not sure which file or files were exactly what i needed, but the whole folder being replaced solved the problems.

    more proof that it is mandatory to back up very often.

    kind regards

    hope this helps others.

    dvwp

    (@dvwordpress)

    this may work better for you. paste into a text widget. replace the paths with your info.

    <ul>
    
    <li><a href="http://facebook.com/yourname"<?php bloginfo('template_directory'); ?><img src="http://path.to.your.jpg" alt="See me on Facebook"></a></li>
    
    <li><a href="http://twitter.com/yourname"<?php bloginfo('template_directory'); ?><img src="http://path.to.your.jpg" alt="Follow me on Twitter"></a></li>
    
    </ul>
    Thread Starter dvwp

    (@dvwordpress)

    so my theme’s sytlesheet will work on 3rd party widgets as well? in this case, for example, will i be making changes to the Subsribe2 php?

    Thread Starter dvwp

    (@dvwordpress)

    hey henkholland

    the reason i want to change it is because some of my contributors are confused when they just see [e].

    if it was only for myself i wouldn’t change it.

    thanks very much for your help!

Viewing 15 replies - 16 through 30 (of 31 total)