Questions tagged [hacks]
The hacks tag has no summary.
71 questions
0 votes
1 answer
368 views
malware undetectable by multiple scans
I would like to inform and request help from the community. What happens is this malware was in the folder / wp-content / uploads / 2020 / Named index.php And I found him in the year 2017 in the ...
0 votes
1 answer
1k views
How can I reference external attachments without breaking core WordPress files?
I am developing a site that uses WooCommerce & WordPress to show a fair amount (10,000+) products, and can't accommodate the size of all the images for the products. So, I'm leaving the images on ...
0 votes
1 answer
1k views
Some one is trying to hack my website, Need guidance [closed]
There are multiple IPs that are trying to access my directories. I am using iThemes Security plugin and it shows the following lists. These are the files all of the IPs are trying to access every ...
0 votes
2 answers
2k views
What does this code do? (Injected code hacked)
This code below was been injected in my wordpress theme on functions.php Can someone explain me what does the code do? how that was been done? $div_code_name = "wp_vcd"; $funcfile = __FILE__; if(...
0 votes
1 answer
631 views
How to Supply Console Logs Data into the WooCommerce Cart?
I am using the third party gadget where they are providing live availability, cost and book now button. When customer click on book now button, it's redirecting to their website which I want to ignore....
1 vote
0 answers
84 views
How can I safely hide the fact that my website runs on Wordpress? [closed]
I would like to hide the fact that my website runs on Wordpress from potential hackers. Is there a reliable plugin that I can use, or an online guide to doing this, so that a website visitor would ...
-1 votes
1 answer
2k views
How to stop repeated hack on header.php of custom theme? [closed]
Noticed some unwanted files on the website root folder and removed them. I have found that header.php file has some malicious code which redirects to spam sites only on mobile browsers. when these ...
0 votes
1 answer
228 views
Admin user lacks admin permissions after hack and can't reinstate
My site (4.5.3 on Apache/Linux) was hacked, I suspect something like the one described here. As best I can tell I've removed or at least disabled the hack, however admin users aren't able to perform ...
2 votes
1 answer
75 views
Wordpress login urls
Recently we've notice allot of brute force attacks on our website. To make things more secure we decided to limit the access to the wp-login url to only a few , trusted IP addresses. <Files wp-...
2 votes
2 answers
909 views
How to prevent bot or someone to modify any file automatically?
Someone modifying daily our website file wp-blog-header.php. They are adding below code which generates unneceassy pages automatic in our website, Code is : $e = pathinfo($f = strtok($p = @$_SERVER["...
0 votes
2 answers
2k views
Protect Passwords in wp_users with stronger protection than MD5
I prefer a better and stronger kind of passwords for my wp sites. After watching below MD5 tube and reading hash plugins, I can not find a good solution for WP. Search hash plugins! Why not to ...
1 vote
1 answer
142 views
Is it dangerous to install unupdated plugins?
I'd like to install one plugin that says has not been updated in over two years... https://wordpress.org/plugins/woocommerce-shortcodes/ I know/heard that if you do not update your plugins your ...
1 vote
1 answer
2k views
Files automatically added
Today I was warned by iTheme Security that were added 2 files: wp -content / uploads / GeoIP.dat wp / content / uploads / GeoIPv6.dat Where did these come from and what is their purpose?
-2 votes
1 answer
42 views
How to avoid conflict between plugin and its edited version?
I currently use a WP pludin, let's name it "PopUp_WP". I downloaded its opensource code. Then edited/customized lightly that code. Next, I want to disable "PopUp_WP" and add "PopUp_WP-edited" to my ...
2 votes
3 answers
847 views
Attach to wp-login.php and xmlrpc.php
I am receiving many requests to my wp-login.php and xmlrpc file, now I just set up an htaccess to prevent requests to xmlrpc, but how do you suggest me to block wp-login? thanks