yes, it might be. to be onest i have never seen this before. maybe your browser is the quilty one.
just tried it on firefox and chrome with the same results
try to click ctrl + f5 several times and see if something changes.
Are you on free GoDaddy hosting? Some people have problems with that free hosting as it rewrites style.css URLs in order for GoDaddy’s ads to be displayed.
If not, post your site URL here so we can see the code. Even without getting into admin, something might be evident from page source.
Did you do an upgrade just before this happened? If so, reupload a fresh copy of the wp-admin folder, since maybe some files didn’t get uploaded all the way.
If not, it might be a rewrite problem with .htaccess. I’d try deleting your .htaccess file, and since you’re on default permalinks, that’s not going to effect permalinks. Use FTP to go to your root folder at your web host.
Also, you’ve got some sort of spam ink in header.php that is trying to load a script. Did you put it there? :<script>script src=(urldeleted)index_zebraComfort.php ></script>
nah I’m actually looking through the php files to remove.
would you know where exactly? I looked in the header.php and it’s not in there.
Look in page source; it’s in between the </head> tag and the <body> tag, so maybe it’s at the top of index.php.
I’ve been looking at the index.php in my current theme folder and the “Themes” folder.
The rest tend to have “Silence Is Golden”
songdogtech, any idea what that piece of script actually does?
It looks like it replaces SgDA with $. But what’s SgDA or what’s the value of it?! Anyway, the links in the footer are a little spammy too, so it all probably came with the theme itself.
Al, don’t forget to try disabling all your plugins too regarding the original problem.
Alism, the URL of the script throws a 404, so I don’t know any more than that; you’re better at php than me if you can tell part of what it does….
Heh, doubt that. Not sure that is a real 404 though. Reloading and looking at the page source and headers, it actually appears the code randomly generates different variable names. What was ‘SgDA’ before is actually different each time, but it still appears to be replacing whatever it is with a $. But ah well. Just curious me.
ok, so my dashboard’s back after reuploading wordpress core files.
now as far as the fine/biz url, I still see it when I view page source but when I ran EXPLOIT SCANNER it showed me it was in the google analytics plugin, I went in and removed the script, rescanned and nothing came up. now, i’m looking at the page source and it’s still there. I’ve cleared my cookies to see if it would change. no dice.
