WordPress.org

Ready to get started?Download WordPress

Forums

Pharmacy links in themes? Coming from plugins? (2 posts)

  1. MohsinSiddiqui
    Member
    Posted 4 years ago #

    Just curious--I've noticed something similar all of a sudden with my site (http://www.lucidityllc.com). Until around this morning, it seemed fine; then a few hours ago, a tiny little link "Pharmacy" popped up in the top left-hand corner of the screen. I have no idea how this happened, but have been trying to find out where in the body of my theme I can discover the code to delete it! Can anyone help? I don't know what to do--there's no div id called "wraps" that I can discover!

    The only thing that I did in the middle was upgrade the Akismet and the All-in-One SEO plugins. Could that have somehow caused this?

    <meta name="generator" content="WordPress 2.8.6">
    <link rel="shortlink" href="http://wp.me/PdVIm-4"><style type="text/css" media="screen">
    <!-- @import url( http://www.lucidityllc.com/wordpress/wp-content/themes/blue-zinfandel/style.css ); -->
    </style>
    <strong></head><body>
    <div id="wraps"><a href="http://www.onlinepharmacy4.com/">pharmacy</a></div></strong>
    
    <script language="javascript">
    var wt = 'get'+'Element'
    var stl = 'st'+'yle';
    var _0xd22c=["function seeThat(elem) { eval(x22elem.x22+stl+x22.display=x27blockx27;x22); }"];
    _0xd22c[0x0] = _0xd22c[0x0].replace(/block/i,"none");
    eval(_0xd22c[0x0]);
    </script>
    <script>
    var str = 'seeThat(document.getElementById("link"));';
    eval(str.replace(/link/i,'wraps'));
    </script><div id="header">
    	<a href="http://www.lucidityllc.com/">Lucidity</a><br />
    	Clarity is Everything</div>
    
    <div id="navbar">
  2. cubecolour
    ɹoʇɐɹǝpoɯ
    Posted 4 years ago #

    There could have been some dodgy code added into your theme as you appear to have downloaded it from a third party site which has added in their own link in the footer. Who knows what else thay may have added in? I've just downloaded the theme you have from the source in the link and there is a load of base64 encoded stuff in a file called theme_license.php. I'd imagine that something in there is likely to be the culprit.

    You should only use the original version of the theme from a reputable source, ie the original author's site, or the WordPress repository.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.