Support » Fixing WordPress » hack script in the header of the website and backend

  • I have an unwanted script which is creating trouble in working of my website. I m using multisite also and I lost my all images on it

    link view-source:

    the script :

    <div style="text-indent:-9999em"><a href="" rel="follow">Home Depot Coupon Codes 2012</a> <a href="" rel="follow">Lexapro Side Effects</a> <a href="" rel="follow">Office Depot Coupons</a> <a href="" rel="follow">JCPenney Coupons</a> <a href="" rel="follow">Pizza Hut Coupons</a> <a href="" rel="follow">Big Brother Albania 6</a> <a href="" rel="follow">Citalopram Side Effects</a> <a href="" rel="follow">Joann Fabrics Coupons</a> <a href="" rel="follow">Neurontin Side Effects</a> <a href="" rel="follow">Horoskopi</a> <a href="" rel="follow">Walmart Coupons</a> <a href="" rel="follow">Atenolol Side Effects</a> <a href="" rel="follow">kohls coupons</a> <a href="" rel="follow">bed bath and beyond coupon</a> </div>

    Please help me how to remove it.

Viewing 3 replies - 1 through 3 (of 3 total)
  • esmi


    Forum Moderator

    Have you tried:

    – deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

    – switching to the Twenty Eleven theme to rule out any theme-specific problems.

    resetting the plugins folder by FTP or PhpMyAdmin. Sometimes, an apparently inactive plugin can still cause problems.

    Hi, did you solved this? I have the exact same issue…

    Hi, resolved!!!

    Go to your theme folder, you will find the functions.php file; inside this file I had this line

    eval(base64_decode(“[ redacted, please do not post that here again ]“));

    Once removed, the problem disappeared. Obviously, you have to clean your wp-config.php and wp-admin/wp-config.php removing tha last line that should be similar (but shorter) than the one above.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘hack script in the header of the website and backend’ is closed to new replies.