Riversatile

So, try this :
<h2><?php the_category(',', '' ); ?></h2>

Did you checked that the shortcode of Analytics appears on the source code of all your web page ?
It’s stupid, but worth checking !

You should see something like that :

<script type="text/javascript">//<![CDATA[
	// Google Analytics for WordPress by Yoast v4.2.3 | http://yoast.com/wordpress/google-analytics/
	var _gaq = _gaq || [];
	_gaq.push(['_setAccount','UA-XXXXXXX-X']);
	_gaq.push(['_setCustomVar',1,'logged-in','administrator',1],['_trackPageview']);
	(function() {
		var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
		ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
		var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
	})();
	//]]></script>

Using your FTP, download all the “wp-content\themes\” folder to your PC.
Then, remove all the themes in it on your server.
Then, check your website again.

So simple !

Try to replace
<h2><?php the_category(' &bull; '); ?></h2>
by
<h2><?php single_cat_title(''); ?></h2>

You have encountered an attack by SQL injection !

So in first, you need to know why !!!
Connect your FTP server, then looking for files that have been changed recently (by modified date), then, with a backup (if you have one !), overwrite those files with the original files.

In second, if you have a backup of your database, restore it with the most recent. If you still see “dave” with the email “addy ds@fsmail.net”, restore with the 2nd most recent database backup, and so on…

When all came back normal, I suggest you to find out more information on why you have encounter this attack.
You should use the following plug-in to protect your site :
– Akismet : Filter the most of the Spam attack
– Bad Behavior : Filter and block the most of the Spam attack, bad/suspicious behavior and Code injection
– WP Security Scan : Allows you to change the database table name (from wp_something to example_something), like that attacker may have difficulty to inject suspicious code in your database
– Login LockDown : Prevent user to brute/force your wordpress credentials

– WordPress Database Backup : Allow you to plan backup (daily, weekly, etc…) and send them to your personal email !

Whaawww ! Effectively !

So you should create a search form that contains more than 1 field !
In this cas, you need 2 fields. Like that, 2 query at the same time, then return the resulting posts that matches the search.

Could it work like that ?

The code above will displays this kind of thing :
http://www.riversatile.fr/?s=surf

Hi,

I’m familiar with PHP on WordPress, but I don’t understand what you want to do, I’m french, so I’m not so familair with English !

Can you just explain what you want to do, without speak about what you already done to do that ?