|
I found out that i have a script that get written on top of my core index.php and also the index.php in wp-admin folder. This breaks the theme and dashboard. I have searched and cannot find any malicious code in wp-config.php or wp-settings.php here is what i get check it What can this be? Its not due to a plugin i know that. |
|||||||
|
Questions on WordPress Answers are expected to relate to WordPress within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.
|
Core files should never be modified. This is more than likely due to one of two reasons. a) A plugin has placed this code into one of the core files. If this is the case, you probably shouldn't be using that plugin. A good plugin developer would know not to modify core files. b) Your site has been compromised, and the script was maliciously injected. Either way, the easiest way to resolve the issue is to re-upload the core files. I would recommend disabling any plugins you do have to ensure that this is not the issue. Once you re-upload, re-enable each plugin one at a time to see if it adds the script. If so, you know where the issue lies. If the plugins do not add the code, than your site was probably compromised, in which case you should check your server settings. |
|||
|
|
