WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It looks like several my sites on BlueHost got code injection in the wp-config.php file. Injected code itself looks like

Any clue where it comes from? BH malware scan doesn't recognize that code so they are not able to detect where it started.


share|improve this question
Have you contacted Bluehost support about this issue? what do they say? – Pieter Goosen May 5 '14 at 18:31
Yes, I spoke to them, they have scanned whole account and told me that they scan for known malware code and may not recognize whatever they don't have in their database. – JackTheKnife May 5 '14 at 18:37
Usually encrypted code like this are some kind of malware. You will need to decrypt it to know where it comes from. Unfortunately not a field I have knowledge about. – Pieter Goosen May 5 '14 at 18:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.