Title: ravage's Replies | WordPress.org --- # ravage [ ](https://wordpress.org/support/users/ravage/) * [Profile](https://wordpress.org/support/users/ravage/) * [Topics Started](https://wordpress.org/support/users/ravage/topics/) * [Replies Created](https://wordpress.org/support/users/ravage/replies/) * [Reviews Written](https://wordpress.org/support/users/ravage/reviews/) * [Topics Replied To](https://wordpress.org/support/users/ravage/replied-to/) * [Engagements](https://wordpress.org/support/users/ravage/engagements/) * [Favorites](https://wordpress.org/support/users/ravage/favorites/) Search replies: ## Forum Replies Created Viewing 2 replies - 1 through 2 (of 2 total) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Events Manager - Calendar, Bookings, Tickets, and more!] [Plugin: Events Manager] comma appears in event list when map is "off"](https://wordpress.org/support/topic/plugin-events-manager-comma-appears-in-event-list-when-map-is-off/) * Thread Starter [ravage](https://wordpress.org/support/users/ravage/) * (@ravage) * [14 years, 2 months ago](https://wordpress.org/support/topic/plugin-events-manager-comma-appears-in-event-list-when-map-is-off/#post-2633503) * No map- location off Screen shot is here: [http://www.uppersouthplatte.org/image/screen.jpg](http://www.uppersouthplatte.org/image/screen.jpg) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [java exploit hack in wp 3.3. beta](https://wordpress.org/support/topic/java-exploit-hack-in-wp-33-beta/) * [ravage](https://wordpress.org/support/users/ravage/) * (@ravage) * [14 years, 2 months ago](https://wordpress.org/support/topic/java-exploit-hack-in-wp-33-beta/page/2/#post-2347781) * I have been fighting this for about a year on installs at work. I traced it back to an occurrence in 2008 on one of the sites. A false user had been injected into the database. But the real source of the constant re- infection seemed to be….. “Hello Dolly”. Even though the plugin was inactive. once I found the code inside of it and removed it- the attacks stopped (fingers crossed) it has been 2 months sine I had to remove the crap from my indexes, headers, and footers- so I hope that was it. I did, of curse remove the hidden user- but I did get hit again after that. I had to comb through basically ever .php file to find it. Of course it’s possible that this exploit wears many masks- but if it happens- check you’re hellow dolly- since it’s in every install- it’s a really good target. Viewing 2 replies - 1 through 2 (of 2 total)