forwardtrends
Forum Replies Created
-
Since the author hasn’t replied or address this, here’s the fix…
Basically in PHP 7.3 it’s using a more strict engine to process regular expressions. In this case, the hyphens need escaped on line 379 (escape means add a backslash before the hyphen, there are 2 in this line)
Change This:
if ( ! preg_match_all('/( [\\w_-]+ |([\\w-_]+)\s*=\\s*("[^"]*"|\'[^\']*\'|[^"\'\\s>]*))/', $tag, $matches, PREG_SET_ORDER) )To This:
if ( ! preg_match_all('/( [\\w_\-]+ |([\\w\-_]+)\s*=\\s*("[^"]*"|\'[^\']*\'|[^"\'\\s>]*))/', $tag, $matches, PREG_SET_ORDER) )Thanks for the reply. No extra events in the db. Only 1 location that was not registering through the wordpress admin panel – Is it supposed to have a date associated with it? I disabled “locations” through event manager already with no change.
I realize also that there are record in “wp_posts” that should be associated with events, but reading on other forum posts this was to have be resolved with the latest updates?
I was able to hack-fix this by editing the classes/em-events.php – line 579 I added an if statement to check for events without “January 1, 1970”. Would still like to know why these are being outputted when no ghost events exist. Thanks
foreach ($events_dates as $event_day_ts => $events){ if(date_i18n($format,$event_day_ts) != 'January 1, 1970') { echo '<h2>'.date_i18n($format,$event_day_ts).'</h2>'; echo self::output($events, $atts); } }Forum: Fixing WordPress
In reply to: Malware Hack Reinfecting htaccess fileFor anyone still pulling their hair out with this…
I run about 80 wordpress sites on the same server – htaccess files getting updated every couple hours. I went through changed all passwords, wordpress version updates, plugin updates, wordpress user accounts, ftp accounts, timthumb updates, htaccess permissions etc. – I did it all and it was still happening.
After pouring through my server logs I found that russian IP addresses were accessing “version.php” in my wordpress sites. (NOT the wp-includes/version.php – these were usually in the themes folder and in a couple cases right in the root of the website.)
Inside that version.php file was a php script called “Web Shell by oRb” that was causing the issue to reoccur. I removed these files and the problem has finally stopped happening.
I googled this issue and surprisingly nobody has any info on it (even sucuri) – hope this helps someone out