WordPress.org

Ready to get started?Download WordPress

Forums

Weird links below each post..... (20 posts)

  1. boriskamp1991
    Member
    Posted 1 year ago #

    Today I started setting up a newsletter for my website and noticed something strange in my RSS feed.

    at the bottom of each post there is automatically generated link that I cant seem to trace.
    I want to get rid of it, do you guys have any idea?????
    Here is my RSS feed so you can check it out

    thanks!

  2. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    Are you using any image/ photo plugins?

  3. boriskamp1991
    Member
    Posted 1 year ago #

    Yes, I am usimg fancybox and nedtgen gallery.
    Thank you for your reply

    Boris

  4. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    Can you turn of the plugins and see if the links are still there?

  5. boriskamp1991
    Member
    Posted 1 year ago #

    I turned it off, but nothing changed.
    When I view my posts ON my site, I cant see the link a the bottm of the page.
    It is onl visable in the rss feed.

    Any suggestions anyone?
    Thanks

  6. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    I find base64 codes in your site which can perhaps be causing the trouble. See the validation report here, though I am not sure if they are malicious.

  7. boriskamp1991
    Member
    Posted 1 year ago #

    Thank you for your help krishna, but the link you gave me is like magic to me, can you find the error in the report? And what I should change?

  8. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    You may go through line 327 of the above and other links below. Probably the base64 code is being injected by the plugin widgetkit. You may delete it and see what happens, though there can be other sources of the code.

  9. boriskamp1991
    Member
    Posted 1 year ago #

    thank you for your suggestion,
    Disabling widgetkit doesnt seem to change it (cleared my cache after)
    I cant see any link below your post (you last post)
    and line 327 is empty? or am I missing something?

    thanks for your help!

  10. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    You won't find it now (I posted it two days ago). Now I get this error:
    500 Can't connect to 'http::80 (Bad hostname ''http:') when I tried to get a new report. Maybe, disabling widgetkit could have changed it.

    Anyway, check up if you get the same error?

  11. boriskamp1991
    Member
    Posted 1 year ago #

    I get this:

    HTML5 Validator Error ✉
    Line 273, column 140: An a start tag seen but an element of the same type was already open.
    …http://www.militaryscalemodelling.com"><img src="http://www.militaryscalemodel…
    Line 273, column 140: End tag a violates nesting rules.
    …http://www.militaryscalemodelling.com"><img src="http://www.militaryscalemodel…
    Line 273, column 140: Cannot recover after last error. Any further errors will be ignored.
    …http://www.militaryscalemodelling.com"><img src="http://www.militaryscalemodel…

    the link works on my side right?

  12. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    I think most of the earlier problems are over now. What problems do you find now?

  13. boriskamp1991
    Member
    Posted 1 year ago #

    well, I still got the problem as described in teh first post:

    at the bottom of each post there is automatically generated link that I cant seem to trace.
    I want to get rid of it, do you guys have any idea?????
    Here is my RSS feed so you can check it out

    check out my rss feed, and check the bottom of each post.

  14. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    Now I find malicious code (phishing) hosted in your site. See line 375 of your validation report.

    Earlier you had base64 as I pointed out.

    Here is what you need to do. Follow all the steps as in the case of a hacked site. I would not hesitate to say your site is hacked, sorry.

    Here is what you need to do:
    http://codex.wordpress.org/FAQ_My_site_was_hacked

    Good Luck!

  15. boriskamp1991
    Member
    Posted 1 year ago #

    Thanks again!
    but what is the problem? line 375 is my twitter update right?
    was a bit shocked still, so I did change my secret keys and password just to be sure.

  16. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    Do you find something like this -- t.co/krpDMMLh-- (not complete URL) in the string starting with line 375? If so copy the URL correctly from there and test it here: http://sitecheck.sucuri.net/scanner/

    or using some other security scanners.

  17. boriskamp1991
    Member
    Posted 1 year ago #

    Yeah i found the one you typed above.
    but that shortlink is the link to my site..... so nothing wrong right?

  18. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    but that shortlink is the link to my site..... so nothing wrong right?

    If that short link is your site, see this report for your site and decide for yourself if your site is SAFE. I am sorry, I just cannot make you understand, and it seems you do not want to find out the real problem either.

  19. boriskamp1991
    Member
    Posted 1 year ago #

    Sorry if I insulted you, but I am doing my best to understand.
    that shortlink can be seen in y twitter widget (right sidebar of my site).

    And, indeed when that shortlink is checked trough the security sites, it results in spam, but when I enter my full url, all is green and ok

    I will see if I can remove that wtitter post, its a useless one anyway, just a testout when I first used twitter :p

    but back to my problem,
    any thought?

    thanks Krishna

  20. Krishna
    Volunteer Moderator
    Posted 1 year ago #

    Whatever you may do, the problems shall keep repeating in one way or the other as long as you continue with the same theme, plugins, infected links, etc. It is an infection. As a temporary measure you may try this:
    1. Back up your site completely
    2. Delete the suspicious links
    3. Delete all plugins
    4. Download a fresh copy of Twenty Eleven theme and install it
    4. Change to Twenty Eleven theme

    If the above steps solves your problem, wait for a few days to see if the problem returns. If it returns, it simply means your site still has links or loopholes allowing hackers and malicious software. In that case, follow the instructions as in the link for hacked sites I quoted above.

Topic Closed

This topic has been closed to new replies.

About this Topic