fullbrainfilms
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: WordPress 5.5 and Youtube embed – videos stoped showingI just came across this looking for an answer and given the information provided, I seem to have found one.
Recent WordPress updates have added both tag classes and style to figure/embed tags. The class added to the figure tag, wp-has-aspect-ratio, seems to require a CSS display: block to work properly. I’m sure many themes have figure tags set to display: inline-block as mine did.
A simple fix for the problem requires that you put the following CSS in your Appearance -> Customize -> Additional CSS:
.wp-has-aspect-ratio { display: block !important; }- This reply was modified 5 years, 6 months ago by fullbrainfilms.
- This reply was modified 5 years, 6 months ago by fullbrainfilms.
Forum: Fixing WordPress
In reply to: I've been Hacked and need helpI have the same issue described by @paulhanaki. I have 66 WordPress sites and 3 of them were altered on December 1, 2014. (I teach an intro to WP class and every student has 3 sites they work with each, which is why I have so many.)
I assumed this code was introduced by a security breach in either a plugin or through the MOJO Marketplace install which I just noticed leaves files in the site root.
All of the sites have a common username (admin), but they each have different and unusual passwords from each other.
All of these sites have only the following plugins in common:
Akismet
Contact Form 7
Duplicator
Google Analytics (Yoast)
NextGEN Gallery
W3 Total Cache
WooCommerce
WordPress SEO (Yoast)They were all installed from a Duplicator backup of the original MOJO Marketplace installation of one of the sites (and that original site has not been hacked at this point). I do not have nor use the MOJO marketplace plugin, however, there is the issue of those MOJO files sitting on site root.
And similarly, the harmful code in functions.php creates a link to a different real site that appears in the header of the student sites. Oddly, the code creates a different link for each one of the infected sites and those links link to an existing site that previously had malware on it, but has since been cleaned.
Although I remove these sites at the end of the month, completely deleting their databases and all related files from my server, I’m concerned that students who made backup of these sites may be exposed to a hacking later if they restore them on their own servers.
If I run across any other useful information, I’ll pass it along here.