1

Have a great problem, in title wordpress site sometimes (random) added inject code (screenshoot).

enter image description here

After code added site redirection on page with banners.

Change server pass, change users pass, add google authentification and change enter point (not wp-login.php), but inject work everyday. Wordpress 4.9.4.

How stop it?

Improve this question
3
  • Is pcdiy the URL of your own website? Try deactivating your plugins one by one and see if one of them causes this problem.
    – Pim
    Commented Oct 10, 2018 at 10:52
  • No, it,s no my site, it's site with banners. I can deactivate plugin, but inhect code sometimes "sleep" few day (or week, or month) and added again.
    – Vladimir
    Commented Oct 10, 2018 at 11:29
  • Check all your plugins
    – Pim
    Commented Oct 10, 2018 at 11:51

1 Answer 1

Reset to default
1

I would diagnose/fix as if there was a hack of your system. Lots of references in the googles about that.

But my technique is to change credentials on everything (hosting, wp admin users, database, FTP users), reinstall/upgrade everything (WP via the Upgrades page, plugins and themes via manual FTP transfer), check Child Theme code (if any), and then look for rouge files in all site folders manually. Including hidden files (check htaccess files everywhere).

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.