{"id":3920671,"date":"2013-07-11T09:15:28","date_gmt":"2013-07-11T09:15:28","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/hacked-site-found-code-in-html\/"},"modified":"2016-08-21T02:50:08","modified_gmt":"2016-08-21T02:50:08","slug":"hacked-site-found-code-in-html","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/hacked-site-found-code-in-html\/","title":{"rendered":"Hacked site- found code in html"},"content":{"rendered":"<p>Hi,<\/p>\n<p>All my web sites got hacked, google stopped me from entering them by a warning about malicious content. I have scanned the site and it says I have malicious content on my site. I have searched all my files and dabatases but I cannot find the script. <\/p>\n<p>Now I run a test which found the dangerous script (<a href=\"http:\/\/aw-snap.info\/file-viewer\/?tgt=http%3A%2F%2Ftest.undine.se%2Fwp%2F&amp;ref_sel=Google&amp;ua_sel=ff\">result page<\/a>). The problem is that the scanner only show me the .html-file. Also, when I look at the source on the web page, I can see the harmful script but only in the html file. I cannot find this script in the database or the .php files. <\/p>\n<p>The site I am trying to get rid of the script from is http:\/\/test.undine.se\/wp\/<\/p>\n<p>Where do I find the code the html is generated from? <\/p>\n<p>Thanks<br \/>\nGraleh<\/p>\n","protected":false},"template":"","class_list":["post-3920671","topic","type-topic","status-closed","hentry","topic-tag-hacked","topic-tag-malicious"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/3920671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/3920671\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=3920671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}