WordPress.org

1. vegasrenie
   Member
   Posted 2 years ago #

   I haven't done a lot to this site for a quite a few weeks, but when I went to visit it today to plan for new posts, I found it that it was being redirected to a Yahoo Jobs site. It has NOTHING to do with jobs at all! Is there anyway that I can stop this?

   http://mirepoixvegas.com

2. Jonas Grumby
   Member
   Posted 2 years ago #

   FTP to your site and make sure your WP files are there. Download them and used advanced search to see if the redirect URL has been hard-coded into any of your WP files. It's possible that your site has been hacked. It seems like inserting a redirect is a hack that some people have been getting away with lately for whatever reason. If you think your site has been hacked, search the docs & forum for the word hacked.

3. vegasrenie
   Member
   Posted 2 years ago #

   Wow! What an adventure! Of course I went out there and tested everything. The results were quite interesting.

   First of all, I found that I had a bunch of "users" and another "admin" in the Users area. WTF???? They went bye-bye, and I changed the password.

   After reading about how the redirect could take place in the header.php file, I opened it up and it looked normal. HOWEVER, when I opened it up while in WP, it was filled with junk. First thing I did was replace the file with a pristine copy from my theme folder on my desktop.

   Nothing. It still redirected. So I deleted everything in the header file while in the editor, and selected and copied everything from my pristine copy, then pasted it in the file.

   Ta da! Cured.

   A quick update to 2.9.2 and my problem is, apparently, solved. I think the key (at least in my case) was a classic "lessons learned." I made sure that my new password is ever so much stronger, and I think that i've got it locked. At least for now.

4. vegasrenie
   Member
   Posted 2 years ago #

   One more thing, just to emphasize:

   The junk was somehow invisibly coded into the header.php file and DID NOT APPEAR in the copy when ftp'd the site to my hard drive. It did not appear when I checked it through my ftp program. Until I went into the editor, I would not have known that there was anything wrong because it only appeared when I was in the editor area.

   Just a heads up!

Topic Closed

This topic has been closed to new replies.