WordPress.org

Forums

[resolved] SPAM Site Links Appearing on Home Page (8 posts)

  1. colorstruck
    Member
    Posted 6 years ago #

    When I load my site in IE 7 (http://bestfantasystories.com) I get "Done But With Errors on Page." Selecting View, Source shows me that there are TONS of spam/porn links embedded on the page. For example, here's a sample of what appears after the closing </HTML> tag:

    </body>
    </html>

    <!-- c822c1b63853ed273b89687ac505f9fa --><u style="display: none;"><u style="display: none;">tracey morgan porn, CSAIL, free porn rat, Energy.gov, women porn wanted, naked porn reviews, 3pg porn videos, warcraft draenei porn, men's porn magazines,

    How do I remove those links?

    Please Help.

  2. colorstruck
    Member
    Posted 6 years ago #

    I found the source - footer.php had about 500-600 spam links in it. This may be related to the installation of a plugin that contained malicious code. I'll post an update if that's indeed the case. Don't want others to go through this same problem.

  3. jivyb
    Member
    Posted 6 years ago #

    Thanks for posting this! I had the same problem, but the links kept coming up in the header section, so I didn't find them in footer.php. But they were there, just like you said.

    Maybe we can compare plugins installed to see which are in common. Here's my list:

    Akismet
    All in One SEO Pack
    Cforms II
    Customizable Post Listing
    Exclude Pages from Nav
    Ozh' Admin Menu
    Web Invoicing and Billing
    Wordpress Download Monitor

    Any ideas which it might be, based on the ones you also have installed?

  4. jivyb
    Member
    Posted 6 years ago #

    I took out the links in footer.php earlier today and checked just now and they're back in there. I changed my admin pass, so I'm curious to see if that's what's going on...anyone have any ideas???

  5. jivyb
    Member
    Posted 6 years ago #

    Ok--I have four separate WP installations on this server and the two with Cforms II activated were hacked, but the two without it weren't...I know this is a reputable plugin, but it's the only commonality I can find for now. Still hoping someone has ideas.

  6. jivyb
    Member
    Posted 6 years ago #

    The porn spam links were changed this afternoon and put back in on the one installation that I had deleted them. In the other they actually switched the links to different porn sites. I checked my stats and the same computer went in through my wp-admin/theme editor. Here's the ip address: 216.195.55.80.

    Hope this helps someone and I'd love to hear from anyone with ideas.

    Thanks!

  7. whooami
    Member
    Posted 6 years ago #

    I checked my stats and the same computer went in through my wp-admin/theme editor. Here's the ip address: 216.195.55.80.

    Hope this helps someone and I'd love to hear from anyone with ideas.

    Running 2.6.5?

    I have an EXCELLENT idea, but I might not be so interested if thats the case.. e-mail me, if you would please, at my gmail.com address? im whoooo (with 4 small oh's), there.

  8. jivyb
    Member
    Posted 6 years ago #

    Hi there--It's 2.7.1 actually...I'll email

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags