Problem with Injected Links on Some Posts (not all)

  • Resolved lyteforce

    (@lyteforce)


    10 years, 3 months ago

    Doing a quick review of our posts for our wedding blog, I noticed that a post had three links for meds at the top of the page which obviously shouldn’t be there. Since then, I’ve also found similar links in the same location here, here, here, and here (there are a few more, but I figured this was a solid enough list of examples).

    Having had an issue with a site getting hacked years ago (I pretty much left the front door open), I’ve always looked to harden my sites as best as I can to avoid such an issue and marriageinmaui.com is no different. Yet here I write this today having found this issue.

    Is there anything more I can do on my end without going nuclear? I do have DB backups, though I actually do not know when this issue arose and obviously would like to avoid going ALL the way back to the beginning.

    Any suggestions?

Viewing 4 replies - 1 through 4 (of 4 total)
  • webbrewers

    (@webbrewers)

    10 years, 3 months ago

    Looking at the page source, those links are in this element: <div class=”sidebar_blogcontent”>
    Have you looked in the page templates to inspect that div? Have you tried deactivating plug ins to see if one is the culprit? Have you switched to default WP theme to see if it’s a theme issue?

    Thread Starter lyteforce

    (@lyteforce)

    10 years, 3 months ago

    I’d turned off every plugin to no avail, but didn’t think to change the theme and that seemed to do the trick.

    So.. should I stay away from that theme altogether (it was an Automattic one from the repository) or you figure I’m safe with a fresh install? And I’m guessing my next step is to also change my FTP passwords too, eh?

    webbrewers

    (@webbrewers)

    10 years, 3 months ago

    Changing the theme may just be masking the underlying problem. A fairly painless option is to replace all the WP core files with a fresh version. And maybe read through this:
    http://codex.wordpress.org/FAQ_My_site_was_hacked

    Thread Starter lyteforce

    (@lyteforce)

    10 years, 3 months ago

    One of the first links I hit up.

    On the topic of FTP, there’s some smoke that it may have been the route (or at least my best guess). Only one FTP connection was made according to my logs back in September and it had some fun with the header.php in the Sundance theme (the one I was using).

    Thanks for your help with this!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Problem with Injected Links on Some Posts (not all)’ is closed to new replies.

Tags