weird character before doctype I cannot find!
-
So I woke up today and noticed my wordpress was broken in IE due to the letter “F” appearing before the doctype. I changed themes and its still there, disabled ALL plugins, still there so obviously its in one of the WP files. I checked my site visitor logs and noticed these…
178.124.160.117
//plugins/system/nnframework/index.html
6/12/13 6:22 AM50.87.119.146 /wp-cron.php?doing_wp_cron=1371039744.9289751052856445312500
6/12/13 6:22 AM50.87.119.146
/wp-cron.php?doing_wp_cron=1371051558.7271559238433837890625
6/12/13 9:39 AMI checked my config, index, header, and none of them have the rogue letter. I ever checked all files in the WP root. I googled this for an hour and read similar ones on here but they were all typos it seems. This is clearly not a typo but someone hacked my install. I can’t seem to find the first file which was accessed, the nnframework, and I am not sure what the // means other than a network share on a computer lol.
The domain is thercedge.com, if anyone has a clue I’d greatly appreciate any advice or a hint to fix this. Thanks.
- The topic ‘weird character before doctype I cannot find!’ is closed to new replies.