Support » Fixing WordPress » WP hacked pharma links appearing in sidebar

  • I am not sure if this is injected stuff since nothing seems to be in the db or I can not find anything there but this is what it looks like:

    <u style=”display:none”> <B style=”background-color:#FFBBBB”>what is folic acid

    many more links after the first.

    What would be some bullet proof queries to establish whether or not this is in the db or not?

    One other thing I could imagine is that it may have come in via a lightbox script that I installed recently.

    It looked ok to me but I’ll paste it below:

    function createCookie(name,value,days) {
    if (days) {
    var date = new Date();
    date.setTime(date.getTime()+(days*24*60*60*1000));
    var expires = “; expires=”+date.toGMTString();
    }
    else var expires = “”;
    document.cookie = name+”=”+value+expires+”; path=/”;
    }

    function readCookie(name) {
    var nameEQ = name + “=”;
    var ca = document.cookie.split(‘;’);
    for(var i=0;i < ca.length;i++) {
    var c = ca[i];
    while (c.charAt(0)==’ ‘) c = c.substring(1,c.length);
    if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length,c.length);
    }
    return null;
    }

    function eraseCookie(name) {
    createCookie(name,””,-1);
    }

    function popup(url){
    var pos;
    if (window.innerHeight){
    pos = window.pageYOffset
    }else if (document.documentElement && document.documentElement.scrollTop){
    pos = document.documentElement.scrollTop
    }else if (document.body){
    pos = document.body.scrollTop
    }

    var x=document.documentElement.clientWidth/2-240;
    var y=pos+100;

    document.getElementById(‘popup’).style.top=y+’px’;
    document.getElementById(‘popup’).style.left=x+’px’;

    if(blank=document.getElementById(‘black_overlay’))blank.style.display=’block’;
    document.getElementById(‘popup’).style.display=’block’;

    }

    function close_popup(){
    if(blank=document.getElementById(‘black_overlay’))blank.style.display=’none’;
    document.getElementById(‘popup’).style.display=’none’;
    }

    window.onload=function(){
    if(readCookie(‘oldvisitor’)==null){
    createCookie(‘oldvisitor’,1,1);
    popup();
    }
    }

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘WP hacked pharma links appearing in sidebar’ is closed to new replies.