Questions tagged [hacks]

The tag has no usage guidance.

0
votes
1answer
28 views

How can I reference external attachments without breaking core WordPress files?

I am developing a site that uses WooCommerce & WordPress to show a fair amount (10,000+) products, and can't accommodate the size of all the images for the products. So, I'm leaving the images on ...
0
votes
1answer
64 views

Some one is trying to hack my website, Need guidance [closed]

There are multiple IPs that are trying to access my directories. I am using iThemes Security plugin and it shows the following lists. These are the files all of the IPs are trying to access every ...
0
votes
2answers
568 views

What does this code do? (Injected code hacked)

This code below was been injected in my wordpress theme on functions.php Can someone explain me what does the code do? how that was been done? $div_code_name = "wp_vcd"; $funcfile = __FILE__; if(...
0
votes
1answer
202 views

How to Supply Console Logs Data into the WooCommerce Cart?

I am using the third party gadget where they are providing live availability, cost and book now button. When customer click on book now button, it's redirecting to their website which I want to ignore....
1
vote
0answers
54 views

How can I safely hide the fact that my website runs on Wordpress? [closed]

I would like to hide the fact that my website runs on Wordpress from potential hackers. Is there a reliable plugin that I can use, or an online guide to doing this, so that a website visitor would ...
-1
votes
1answer
985 views

How to stop repeated hack on header.php of custom theme? [closed]

Noticed some unwanted files on the website root folder and removed them. I have found that header.php file has some malicious code which redirects to spam sites only on mobile browsers. when these ...
0
votes
1answer
51 views

Admin user lacks admin permissions after hack and can't reinstate

My site (4.5.3 on Apache/Linux) was hacked, I suspect something like the one described here. As best I can tell I've removed or at least disabled the hack, however admin users aren't able to perform ...
2
votes
1answer
45 views

Wordpress login urls

Recently we've notice allot of brute force attacks on our website. To make things more secure we decided to limit the access to the wp-login url to only a few , trusted IP addresses. <Files wp-...
2
votes
2answers
526 views

How to prevent bot or someone to modify any file automatically?

Someone modifying daily our website file wp-blog-header.php. They are adding below code which generates unneceassy pages automatic in our website, Code is : $e = pathinfo($f = strtok($p = @$_SERVER["...
0
votes
2answers
829 views

Protect Passwords in wp_users with stronger protection than MD5

I prefer a better and stronger kind of passwords for my wp sites. After watching below MD5 tube and reading hash plugins, I can not find a good solution for WP. Search hash plugins! Why not ...
1
vote
1answer
60 views

Is it dangerous to install unupdated plugins?

I'd like to install one plugin that says has not been updated in over two years... https://wordpress.org/plugins/woocommerce-shortcodes/ I know/heard that if you do not update your plugins your ...
1
vote
1answer
2k views

Files automatically added

Today I was warned by iTheme Security that were added 2 files: wp -content / uploads / GeoIP.dat wp / content / uploads / GeoIPv6.dat Where did these come from and what is their purpose?
-2
votes
1answer
33 views

How to avoid conflict between plugin and its edited version?

I currently use a WP pludin, let's name it "PopUp_WP". I downloaded its opensource code. Then edited/customized lightly that code. Next, I want to disable "PopUp_WP" and add "PopUp_WP-edited" to my ...
2
votes
3answers
404 views

Attach to wp-login.php and xmlrpc.php

I am receiving many requests to my wp-login.php and xmlrpc file, now I just set up an htaccess to prevent requests to xmlrpc, but how do you suggest me to block wp-login? thanks
-2
votes
2answers
39 views

Windows 10 Printer that Sends to Wordpress [closed]

Is there a way to "print to wordpress" from Windows (10) desktop? So lets say I am looking at a PDF and I want to create a new wordpress post from the PDF, I select print, select "wordpress printer" ...
1
vote
2answers
2k views

Security issues with WP sites

I have just had to deal with a few of my WordPress websites being hacked. First time put an index.html file in the cpanel of each site and replenished my admin user. Once I felt I cleaned this up, it'...
1
vote
2answers
9k views

Can't stop hacker trying to get admin access in WordPress blog after trying many ways [closed]

I have a self-hosted WordPress blog, and for weeks someone has been trying log in as admin. I'm looking for a way to stop it. Since I started blocking the originating IP address, the attempts started ...
0
votes
1answer
126 views

How to insert category name above post title in a featured pages plugin?

I'm trying to hack a plugin to insert the category name of the post above the post title in a plugin/widget that displays three posts in a single row on the front page. The hack I tried is as follows,...
0
votes
1answer
285 views

Hacked site using transient API?

I have got a website to "cleanup" which has almost 10k replicated files in the public_html folder and almost all PHP files contains code $z=get_option("...
0
votes
1answer
148 views

Being hacked. Is there a list of Wordpress security holes I can check against?

I observe a file being uploaded into various plugin folders in my Wordpress site. The file is used to send out spam from my server and every time I remove it it gets uploaded to another folder. There ...
0
votes
2answers
345 views

brute force attack even though it is limited by IP

The security settings of a website we have was done according to Wordpress Recommendations and we did not have any single hacking attempts for months. Especially that wp-login.php and wp-admin are ...
0
votes
1answer
234 views

Custom Post Types and Removing Slugs - should we do it?

I've run into issues trying to remove my custom post types slugs and I've read other questions on here from people with the same problem. We don't want that slug in our URL! But the solutions to this ...
0
votes
1answer
1k views

Multiple wp_options tables to share content across installs

My application has >10 user_roles, each able to perform completely different tasks, provided with an custom backend and no access to wp-admin. The extra functionality each user_role gets to use is ...
0
votes
1answer
146 views

Pull 'Popular Posts' within specific timeframe

I'm looking to display a weekly list of 'Popular Posts' on a site. Currently the list shows a 'Popular Posts' column but these are posts from no particular timeframe. It's displaying the most popular ...
1
vote
0answers
320 views

How can I programmatically show a specific (template) page, like author.php?

My current, hacky way, is this: Right now, in my functions.php file I have something like this: /** * Create the query var so that WP catches the custom /profile/username url */ function ...
1
vote
2answers
72 views

If hacker looked into all php file, can he make a harm to me?

for example, i had all ftp content (wordpress instalation php files) backup, and hacker got that backup file and looked into all php files(including config.php and etc) ... can he somehow access my ...
0
votes
1answer
300 views

db.php, is it a legit file

On one of a WP installation i troubleshoot (because site is down, too much DB connection) for, there is a ADDED file at the root (with wp-config.php and other) this file is called : db.php It's 280 ...
0
votes
0answers
69 views

Post not showing up sometimes on website

I have a weird problem. A particular post is not showing up on my website sometimes. So If I clear cache then it shows up. It is happening only to one particular post. I am not able to figure out what ...
0
votes
1answer
44 views

wordpress admin security

I scan my website using different tool but it shows no malicious script. But when i see in admin dashboard i see strange symbol square below body tag. i tried to check admin index file,root index ...
-3
votes
1answer
45 views

Is there any Reference of Wordpress hook and hacks? [closed]

I am searching for a website to have lots of Wordpress hacks and hooks. Some hooks like activating debug mode or etc. Can you give me lots of this futures ?
1
vote
1answer
7k views

Adding custom fields (post meta) before/during wp_insert_post()

Our code base has a ton of logic that executes as the post is inserted/created. However, some of that logic depends on custom post meta. The only way I know of to add post meta to a new post is like ...
0
votes
1answer
320 views

Trying to see if page is category or single and displaying title with appropriate heading tag

I'm using a custom theme from ThemeForest and I'm trying to get the custom post php to check and see if the post is on a category or single post. If it's on category, use <h2> for the title (for ...
0
votes
2answers
124 views

Wordpress Admin Login Custom Logo

I know this may not be possible.But just trying to know wordpress deeply. Is it possible to replace default admin login page with custom one?
0
votes
2answers
7k views

Synchronizing Two WordPress Sites Content

I've googled a lot, and I do have found answers at WordPress SE and at stackoverflow.com. However, the answers are somewhat incomplete or doesn't work at all. Here I'll explain my problem in detail, ...
0
votes
1answer
140 views

Is there any way to give all users access to one blog in a multisite network without using a plugin?

I know there are various plugins out there to help with multisite user management, but we have a policy of avoiding plugins for a) overzealous security policies, and b) interfering with our already ...
0
votes
1answer
188 views

child_of not working while searching

I'm trying to limit search to a parent page and its own child pages. I've changed searchform.php adding this code: <input type="hidden" value="<?php global $post; $ancestors2 = $post-&...
-1
votes
1answer
2k views

how woocommerce swatch color name when hovered or selected

I have the woocommerce plugin and the woocommerce swatches and photos extension that shows swatches instead of variations as a drop down. When hovering over the swatches and when a swatch is selected,...
0
votes
1answer
134 views

Want to modify a Plugin - Tweetily - Can I make it tweet a Custom Field instead of Post Title?

http://wordpress.org/extend/plugins/tweetily-tweet-wordpress-posts-automatically/ I was wondering if somehow it's possible to make it tweet a Custom Field instead of Post Title? in top-core.php, at ...
7
votes
1answer
8k views

How to get permalinks with category base working with sub-categories

I ran into an issue with a site that needs the category base also included in the custom permalink structure. I know this is an issue and I have read many posts like this that gave me some insight... ...
3
votes
1answer
557 views

Hacking TinyMCE for better usability (shortcodes and html)

I'm looking for some theme or plugin examples that showcase ways in which to enhance the usability of editing shortcodes and/or custom html objects that have been inserted into the editor. I know ...
1
vote
1answer
372 views

How can I autopopulate titles in the media library?

I have hundreds of images in my media library, most have which have no titles. In the media library, the "(no title)" message is displayed along these images. Since I generally have one image per ...
1
vote
1answer
112 views

Delete all one-word comments

I'm trying to delete all wordpress comments with only one word. I found this mysql query to delete all comments at once, but that's not what I want to achieve: DELETE FROM wp_comments WHERE ...
-1
votes
2answers
2k views

Turning a WP Site Into an iPhone/iPad App [closed]

With the advent of responsive design, it's beginning to simply make sense that we could make a site into an app. The concept is simple: When the user is on the site, remove the browser around the ...
0
votes
1answer
78 views

Trying to get variables in hacked category dropdown

I've discovered a workaround to get wp_category_dropdown to display as a multiple select field. My code is as follows: <?php $sponsors = wp_dropdown_categories( array( 'child_of' => 0, '...
0
votes
1answer
154 views

security issue in wordpress?

I have installed wordpress in www.mysite.com/user and now suppose if someone is familiare with wordpress he/she can easily access my stuffs through www.mysite.com/user/members www.mysite.com/user/...
1
vote
2answers
6k views

Hide submenu wordpress?

How to hide customize menu and another submenu on wordpress? I already hide some submenu on wordpress like function hiden() { remove_submenu_page( 'themes.php', 'widgets.php' );//widget ...
4
votes
3answers
2k views

Posts in multiple Categories different single.php

I am smashing my head against some code. Here is the situation: I have one post in 3 different categories, this post has to be visible in "category 1" with the single1.php, in "category 2" with ...
1
vote
2answers
7k views

Add Download Button in prettyPhoto Plugin

I would like to add a download button link for the full-sized image on the prettyPhoto lightbox when a user views a photo on my site. Currently I use the prettyPhoto Media plugin on my site, and I ...
0
votes
1answer
40 views

why the posts queried from sql is more than those showed on the page?

i am using WordPress multisite, the issue i face is that the posts queried from sql is more than those showed on the page, the details is as follows: mysql> select count(*) from wp_137_posts where ...
4
votes
2answers
244 views

Brute force attack?

I'm seeing this quite often: No OS, same Browser, weird hostname -- they're definitely not real users. Can I do anything to take precautions before they do something? Thanks!