WordPress.org

1. mezanul
   Member
   Posted 9 months ago #

   I have noticed a very weired problem. While moderating a comment of one of my visitor through dashboard, I noticed some javascript code after the email address of the comment author. The code is as follows:

   /* <![CDATA[ */(function(){try{var s,a,i,j,r,c,l=document.getElementById("__cf_email__");a=l.className;if(a){s='';r=parseInt(a.substr(0,2),16);for(j=2;a.length-j;j+=2){c=parseInt(a.substr(j,2),16)^r;s+=String.fromCharCode(c);}s=document.createTextNode(s);l.parentNode.replaceChild(s,l);}}catch(e){}})();/* ]]> */

   I got suspicious but upon checking up all the other comments of various visitors I found the same code appended just after the end of the email address. Can someone put some light about this behavior? I am really confused...

2. tvj
   Member
   Posted 7 months ago #

   Hello, i am having the same problem, discovered that code in comments addresses on my website.

   Did you or anybody else discovered what is this or what does it do?

3. jdorenbush
   Member
   Posted 2 months ago #

   I think this thread will answer your question:
   http://wordpress.org/support/topic/sql-ijection-or-something-have-i-been-hacked

4. tvj
   Member
   Posted 2 months ago #

   Thank you jdorenbush for the comment and link, i think that might have been my problem too.

Reply

You must log in to post.