MaggieMBF
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: Pharma Hack – Lookey what I found in wp-options@songdogtech – I have done all of that already, and I mean ALL – core WP files new, clean and shiny, plugins deleted and those needed only reinstalled. This is why I found the code in the wp-options, option_value table. I was hoping my find might help others along the way as well. FWIW, all WP and plugins were/are up to date and my passwords are 14 characters with numbers,letters and symbols.
So does anyone know how to just delete the value that contained the code or, where I might look to find the code that’s inserting the value? It’s odd that it is still there considering the core WP files are shiny new and the plugins too.
And my iMac is not infected nor are any others on our home network.
TYForum: Fixing WordPress
In reply to: Pharma Hack – Lookey what I found in wp-optionsSorry ! Can I post the first few characters? Would that be helpful or not?
Forum: Fixing WordPress
In reply to: Possible Pharma Hack?@joshvariedce – yes, GoDaddy via cheap-domain and support there is useless too. I have gone through all the articles yes. Replaced the core WP stuff and thoroughly combed the DB – hubby is a DB guru and this is not my first WP dance. Nothing was found.
@songdogtech – actually the links do not appear when viewing pagesource. There are no links just the text for Viagra directly under the <body> tag. This shows up and only appear when I’m webmastertools and google is fetching them as a bot. It’s rather strange.
<body class=”single single-post postid-909 single-format-standard c-sw”>
<div class=”o_contentview”>
<p>Applying for loan lender rather in our finances faster Viagra Online BLAH BLAB BLUBI am not trying to hi-jack here; I just wanted to show another oddity related to this as well as a GoDaddy link. I wish I had the cure
Forum: Fixing WordPress
In reply to: Possible Pharma Hack?Having same issue. I found something interesting however. When you past the link
and leave off the last “/” the preview draws the correct meta description/info.
When I copy the link and use the full link, including the last “/” I get this:
“Applying for loan lender rather in our finances faster Viagra Online Viagra Online than actually easier for every week.Problems rarely check should consider a brick and Vidrgne Levitra Vidrgne Levitra use it typically costs money.Such funding loans just one lump sum when Cialis 10mg Cialis 10mg gett…”
Interesting