It looks like several my sites on BlueHost got code injection in the wp-config.php file. Injected code itself looks like

Any clue where it comes from? BH malware scan doesn't recognize that code so they are not able to detect where it started.


  • Have you contacted Bluehost support about this issue? what do they say? – Pieter Goosen May 5 '14 at 18:31
  • Yes, I spoke to them, they have scanned whole account and told me that they scan for known malware code and may not recognize whatever they don't have in their database. – JackTheKnife May 5 '14 at 18:37
  • Usually encrypted code like this are some kind of malware. You will need to decrypt it to know where it comes from. Unfortunately not a field I have knowledge about. – Pieter Goosen May 5 '14 at 18:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.