WebTechGlobal

Any on that list not downloaded from ww.wp.xz.cn either directly from this site or through the WordPress plugins screen?

I did check myself but can’t find one not from the repository, am I wrong or right? The only way is for you to disable one plugin at a time until the link is gone.

peterpohis could you give us a list of all the plugins you have in your blog, while the link is still there please? Unless you know without a doubt which one is causing it. I wouldn’t mind installing it and considering the security that could get around this.

We can probably rule some plugins in your list quickly if you need help narrowing it down.

Hopefully it is not a popular plugin infected at the authors end prior to updating the repository. I’d be amazed if an author has designed this to happen and thinks they can get away with it.

This line is not for subscribers…

if(!current_user_can(‘contributor’,’author’,’editor’,’edit_others_posts’))

Did you test with a user account set to Editor or Author or Contributor?

Is it possible your test account is administrator and your other accounts are subscribers?

It is suitable for administrator due to “edit_others_posts”.

Keith Burgie sorry but your comment is incorrect in most cases.

When providing support on here we must always assume that someone is developing a plugin or theme to be shared and that requires wp_enqueue_script to be used to avoid conflicts.

If your developing a theme or plugin which is not to be shared, then yes you can use the approach in your example however each time a new plugin is installed a conflict may happen.

timelcooley I also recommend doing a check on $_GET[‘page’] and only calling wp_enqueu_script when the page is one of your plugin pages. This makes for a lighter WordPress and goes further to avoiding conflicts especially when your just grasping all of this.

For example. My plugins page slugs all contain “csv2post_” and using strstr() I check if $_GET[‘page’] has csv2post_ within the string which might be “csv2post_page_projects”. I load many script files and a lot of jQuery UI in this plugin, when the user open my plugins own admin pages.

This is secondary important to what songdogtech has already said however. That is the part you need to learn and get right first.