geraintp

that should work tho <strong> is the preferred tag in html5
<strong>...</strong>

alt you can add it to the css
<span style="color:#ff0000;font-weight:bold;"><?php echo date('l jS F Y'); ?></span>

Look and sounds like javascript isn’t loading properly.

in chrome or firefox open the admin panel and right click anywhere and select inspect element
then select console
and refresh the page.

Odds are you’ll see several red lined of text. this should help you figure out which javascript file isn’t loading or is crashing and taking out all the javascript on the page.

It could be since the update that the file permissions for a js file is incorrect so your getting 403 or 404’s or its corrupt or missing.

It could be a plugin or your theme has changed the default version of a js library like jquery or backbone js to a version its happier with but is not compatible with WP4.0 (more common than you’d think and very bad practice)

Your site is also sitting behind cloudflare so it could be a caching issue so you could try flushing the cache

Also just curious, I don’t know why”” # Options +FollowSymlinks “”is used for??

its not its commented out ‘#’ means comment

‘FollowSymlinks’ is completely un related to redirects;- it tells apache whether or not to allow “follow” symbolic links which is a type of folder alias on unix file systems.

First off, avoid adding anything between Begin wp and end wp as wordpress or any plugin might inadvertently delete any of your changes/additions

Their basically marker so it knows where to edit the file.

Secondly add your directives one by one that way you can figure out which one is causing the problem.

so delete this, and the other block

#disable hotlinking of images with forbidden or custom image option
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://mydomain.com.*$ [NC]
RewriteRule .*\.(gif|jpg|jpeg|png|bmp)$ [NC, F, L]

try adding this below the end wp

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?PutYourDomainHere.com [NC]
RewriteRule \.(jpg|jpeg|png|gif|bmp)$ - [NC,F,L]

Replace ‘PutYourDomainHere.com’ with you actually domain name

test your site, if its still working then the rules haven’t broke anything

use this tool to see if you can hotlink an image

Hay,

Are you sure your using WordPress ? that’s not standard WordPress, pages don’t have an option to ‘Upload Zip’ so if your seeing it, its as a result of a plugin.

Now as to why Plugin X isn’t working as expected, ?!?!? you need to speak to the person who made the plugin.

Probably not your issue, but related:
As an aside, WordPress doesn’t allow the upload of .zip and .exe files amongst other to the media library as their considered potentially harmful file types.
see allowed file types

However It will accept a zip when installing a plugin or theme, and the list of allowed file types can be altered to allow more typed by a filter.

When your site was hacked .. some malicious code was added to one of the php files somewhere in your site, it could be in the core wp files, in a plugin or in the theme any files that get loaded to generate your website each time a page is loaded.

Probably the theme, as if you did a fresh install of wordpress and deleted all the plugins you might fix the problem but your less likely to change your theme.

Usually these hacks are use obfuscation (like encryption) to try and hide the code more and prevent you from figuring out what that line(s) of code actually do.

something like
`<?php eval(base64_decode(“……… gibberish, HEX or binary ………”)); ?>’

so scanners like the two mentioned above will look in every file in you site for php functions like ‘eval’, ‘base64_decode’ etc which are commonly used to hide, obfuscate code, as these no real reason to do it unless your trying to hide what your up to.

They should then give you a report of everything it found that it considers suspicious. You’ll then have to investigate manually.

You can also ftp to your site and look at the date modified of the files in your theme, they should all have roughly the same date, i.e. when it was installed or updated, any file with a newer date has be tampered with or modified.

Another option is to try a clean install, back up you site.

make a list of all you plugins, download fresh clean copied from the wp.org, download a fresh copy of wordpress, and a fresh copy of your theme, from a reputable source…

set up you site completely fresh, extract wordpress, put the new plugins in the plugins folder same for the theme, then copy over the old uploads folder i.e. wp-content/uploads probably wise to do a quick visual check there should only uploads in this folder imgs etc… defiantly not scripts .php etc..

finally copy over your wp-config.php file but first scan it for anything that looks malicious, look at ‘wp-config-sample.php’ to get an idea what looks right and what look wrong.

Hope that helps

replace
<?php echo date('l jS F Y'); ?>
with
<span style="color:red"><?php echo date('l jS F Y'); ?></span>
or
use http://www.colorpicker.com/ to set the exact colour ‘#ff0000’
<span style="color:#ff0000"><?php echo date('l jS F Y'); ?></span>

Hi

My bet is you’ve been hacked.

The malicious code detects mobile devices and redirect traffic to
http://mobile.bitterstrawberry.org/?id=422

which in turn redirect to a porn site. 🙁

install a security plugin and scan your site for obscured code, something like
https://wordpress.org/plugins/sucuri-scanner/

Most likely via SQL injection, its a hacking technique used to execute a sql query by overloading a form post with a specially crafted query. To do this hackers need to find a form that doesn’t validate and/or escape form posts correctly.

Ones specific version of a plugin or wp susceptible to an attack is found, a robot could be written to seek out and target sites that use that plugin and version.

Make sure to update wordpress and all your plugins, and disable and remove any plugins that aren’t essential or being used as poorly written plugins are the most common cause of hacked sites.