Questions tagged [hacks]
The hacks tag has no usage guidance.
71
questions
0
votes
1
answer
259
views
malware undetectable by multiple scans
I would like to inform and request help from the community.
What happens is this malware was in the folder / wp-content / uploads / 2020 /
Named index.php
And I found him in the year 2017 in the ...
- 132
0
votes
1
answer
1k
views
How can I reference external attachments without breaking core WordPress files?
I am developing a site that uses WooCommerce & WordPress to show a fair amount (10,000+) products, and can't accommodate the size of all the images for the products. So, I'm leaving the images on ...
- 101
0
votes
1
answer
717
views
Some one is trying to hack my website, Need guidance [closed]
There are multiple IPs that are trying to access my directories. I am using iThemes Security plugin and it shows the following lists.
These are the files all of the IPs are trying to access every ...
- 101
0
votes
2
answers
2k
views
What does this code do? (Injected code hacked)
This code below was been injected in my wordpress theme on functions.php
Can someone explain me what does the code do? how that was been done?
$div_code_name = "wp_vcd";
$funcfile = __FILE__;
if(...
0
votes
1
answer
505
views
How to Supply Console Logs Data into the WooCommerce Cart?
I am using the third party gadget where they are providing live availability, cost and book now button. When customer click on book now button, it's redirecting to their website which I want to ignore....
1
vote
0
answers
72
views
How can I safely hide the fact that my website runs on Wordpress? [closed]
I would like to hide the fact that my website runs on Wordpress from potential hackers. Is there a reliable plugin that I can use, or an online guide to doing this, so that a website visitor would ...
- 131
-1
votes
1
answer
2k
views
How to stop repeated hack on header.php of custom theme? [closed]
Noticed some unwanted files on the website root folder and removed them.
I have found that header.php file has some malicious code which redirects to spam sites only on mobile browsers.
when these ...
0
votes
1
answer
148
views
Admin user lacks admin permissions after hack and can't reinstate
My site (4.5.3 on Apache/Linux) was hacked, I suspect something like the one described here. As best I can tell I've removed or at least disabled the hack, however admin users aren't able to perform ...
- 121
2
votes
1
answer
62
views
Wordpress login urls
Recently we've notice allot of brute force attacks on our website. To make things more secure we decided to limit the access to the wp-login url to only a few , trusted IP addresses.
<Files wp-...
- 269
2
votes
2
answers
790
views
How to prevent bot or someone to modify any file automatically?
Someone modifying daily our website file wp-blog-header.php.
They are adding below code which generates unneceassy pages automatic in our website, Code is :
$e = pathinfo($f = strtok($p = @$_SERVER["...
- 358
0
votes
2
answers
2k
views
Protect Passwords in wp_users with stronger protection than MD5
I prefer a better and stronger kind of passwords for my wp sites. After watching below MD5 tube and reading hash plugins, I can not find a good solution for WP.
Search hash plugins!
Why not ...
- 491
1
vote
1
answer
123
views
Is it dangerous to install unupdated plugins?
I'd like to install one plugin that says has not been updated in over two years... https://wordpress.org/plugins/woocommerce-shortcodes/
I know/heard that if you do not update your plugins your ...
1
vote
1
answer
2k
views
Files automatically added
Today I was warned by iTheme Security that were added 2 files:
wp -content / uploads / GeoIP.dat
wp / content / uploads / GeoIPv6.dat
Where did these come from and what is their purpose?
-2
votes
1
answer
35
views
How to avoid conflict between plugin and its edited version?
I currently use a WP pludin, let's name it "PopUp_WP".
I downloaded its opensource code.
Then edited/customized lightly that code.
Next, I want to disable "PopUp_WP" and add "PopUp_WP-edited" to my ...
- 97
2
votes
3
answers
767
views
Attach to wp-login.php and xmlrpc.php
I am receiving many requests to my wp-login.php and xmlrpc file, now I just set up an htaccess to prevent requests to xmlrpc, but how do you suggest me to block wp-login?
thanks
- 1,195
-2
votes
2
answers
45
views
Windows 10 Printer that Sends to Wordpress [closed]
Is there a way to "print to wordpress" from Windows (10) desktop? So lets say I am looking at a PDF and I want to create a new wordpress post from the PDF, I select print, select "wordpress printer" ...
- 318
1
vote
2
answers
2k
views
Security issues with WP sites
I have just had to deal with a few of my WordPress websites being hacked. First time put an index.html file in the cpanel of each site and replenished my admin user. Once I felt I cleaned this up, it'...
- 11
2
votes
2
answers
12k
views
Can't stop hacker trying to get admin access in WordPress blog after trying many ways [closed]
I have a self-hosted WordPress blog, and for weeks someone has been trying log in as admin. I'm looking for a way to stop it. Since I started blocking the originating IP address, the attempts started ...
- 23
0
votes
1
answer
266
views
How to insert category name above post title in a featured pages plugin?
I'm trying to hack a plugin to insert the category name of the post above the post title in a plugin/widget that displays three posts in a single row on the front page.
The hack I tried is as follows,...
- 3
0
votes
1
answer
332
views
Hacked site using transient API?
I have got a website to "cleanup" which has almost 10k replicated files in the public_html folder and almost all PHP files contains code
$z=get_option("...
- 309
0
votes
1
answer
163
views
Being hacked. Is there a list of Wordpress security holes I can check against?
I observe a file being uploaded into various plugin folders in my Wordpress site. The file is used to send out spam from my server and every time I remove it it gets uploaded to another folder. There ...
- 131
0
votes
2
answers
508
views
brute force attack even though it is limited by IP
The security settings of a website we have was done according to Wordpress Recommendations and we did not have any single hacking attempts for months. Especially that wp-login.php and wp-admin are ...
- 103
0
votes
1
answer
335
views
Custom Post Types and Removing Slugs - should we do it?
I've run into issues trying to remove my custom post types slugs and I've read other questions on here from people with the same problem. We don't want that slug in our URL! But the solutions to this ...
- 120
1
vote
2
answers
2k
views
Multiple wp_options tables to share content across installs
My application has >10 user_roles, each able to perform completely different tasks, provided with an custom backend and no access to wp-admin.
The extra functionality each user_role gets to use is ...
- 109
0
votes
1
answer
273
views
Pull 'Popular Posts' within specific timeframe
I'm looking to display a weekly list of 'Popular Posts' on a site. Currently the list shows a 'Popular Posts' column but these are posts from no particular timeframe. It's displaying the most popular ...
- 101
1
vote
0
answers
336
views
How can I programmatically show a specific (template) page, like author.php?
My current, hacky way, is this:
Right now, in my functions.php file I have something like this:
/**
* Create the query var so that WP catches the custom /profile/username url
*/
function ...
- 394
1
vote
2
answers
91
views
If hacker looked into all php file, can he make a harm to me?
for example, i had all ftp content (wordpress instalation php files) backup, and hacker got that backup file and looked into all php files(including config.php and etc) ... can he somehow access my ...
- 5,629
0
votes
1
answer
1k
views
db.php, is it a legit file [closed]
On one of a WP installation i troubleshoot (because site is down, too much DB connection) for, there is a ADDED file at the root (with wp-config.php and other) this file is called : db.php
It's 280 ...
- 872
0
votes
0
answers
103
views
Post not showing up sometimes on website
I have a weird problem. A particular post is not showing up on my website sometimes. So If I clear cache then it shows up. It is happening only to one particular post. I am not able to figure out what ...
0
votes
1
answer
50
views
wordpress admin security
I scan my website using different tool but it shows no malicious script.
But when i see in admin dashboard i see strange symbol square below body tag.
i tried to check admin index file,root index ...
- 159
-3
votes
1
answer
48
views
Is there any Reference of Wordpress hook and hacks? [closed]
I am searching for a website to have lots of Wordpress hacks and hooks.
Some hooks like activating debug mode or etc.
Can you give me lots of this futures ?
1
vote
2
answers
8k
views
Adding custom fields (post meta) before/during wp_insert_post()
Our code base has a ton of logic that executes as the post is inserted/created. However, some of that logic depends on custom post meta. The only way I know of to add post meta to a new post is like ...
- 115
0
votes
1
answer
617
views
Trying to see if page is category or single and displaying title with appropriate heading tag
I'm using a custom theme from ThemeForest and I'm trying to get the custom post php to check and see if the post is on a category or single post. If it's on category, use <h2> for the title (for ...
- 55
0
votes
2
answers
143
views
Wordpress Admin Login Custom Logo
I know this may not be possible.But just trying to know wordpress deeply.
Is it possible to replace default admin login page with custom one?
- 591
0
votes
2
answers
9k
views
Synchronizing Two WordPress Sites Content
I've googled a lot, and I do have found answers at WordPress SE and at stackoverflow.com. However, the answers are somewhat incomplete or doesn't work at all. Here I'll explain my problem in detail, ...
- 666
0
votes
1
answer
152
views
Is there any way to give all users access to one blog in a multisite network without using a plugin?
I know there are various plugins out there to help with multisite user management, but we have a policy of avoiding plugins for a) overzealous security policies, and b) interfering with our already ...
- 115
0
votes
1
answer
468
views
child_of not working while searching
I'm trying to limit search to a parent page and its own child pages.
I've changed searchform.php adding this code:
<input type="hidden" value="<?php
global $post;
$ancestors2 = $post-&...
- 367
-1
votes
1
answer
2k
views
how woocommerce swatch color name when hovered or selected
I have the woocommerce plugin and the woocommerce swatches and photos extension that shows swatches instead of variations as a drop down.
When hovering over the swatches and when a swatch is selected,...
- 111
0
votes
1
answer
138
views
Want to modify a Plugin - Tweetily - Can I make it tweet a Custom Field instead of Post Title?
http://wordpress.org/extend/plugins/tweetily-tweet-wordpress-posts-automatically/
I was wondering if somehow it's possible to make it tweet a Custom Field instead of Post Title?
in top-core.php, at ...
9
votes
1
answer
10k
views
How to get permalinks with category base working with sub-categories
I ran into an issue with a site that needs the category base also included in the custom permalink structure. I know this is an issue and I have read many posts like this that gave me some insight...
...
- 440
3
votes
1
answer
649
views
Hacking TinyMCE for better usability (shortcodes and html)
I'm looking for some theme or plugin examples that showcase ways in which to enhance the usability of editing shortcodes and/or custom html objects that have been inserted into the editor.
I know ...
- 3,153
2
votes
1
answer
454
views
How can I autopopulate titles in the media library?
I have hundreds of images in my media library, most have which have no titles.
In the media library, the "(no title)" message is displayed along these images.
Since I generally have one image per ...
- 153
1
vote
1
answer
135
views
Delete all one-word comments
I'm trying to delete all wordpress comments with only one word. I found this mysql query to delete all comments at once, but that's not what I want to achieve:
DELETE FROM wp_comments WHERE ...
- 177
-1
votes
2
answers
3k
views
Turning a WP Site Into an iPhone/iPad App [closed]
With the advent of responsive design, it's beginning to simply make sense that we could make a site into an app. The concept is simple:
When the user is on the site, remove the browser around the ...
- 1,051
0
votes
1
answer
81
views
Trying to get variables in hacked category dropdown
I've discovered a workaround to get wp_category_dropdown to display as a multiple select field. My code is as follows:
<?php
$sponsors = wp_dropdown_categories( array(
'child_of' => 0,
'...
- 255
0
votes
1
answer
163
views
security issue in wordpress?
I have installed wordpress in www.mysite.com/user and now suppose if someone is familiare with wordpress he/she can easily access my stuffs through www.mysite.com/user/members
www.mysite.com/user/...
1
vote
2
answers
11k
views
Hide submenu wordpress?
How to hide customize menu and another submenu on wordpress?
I already hide some submenu on wordpress like
function hiden() {
remove_submenu_page( 'themes.php', 'widgets.php' );//widget
...
- 653
4
votes
3
answers
3k
views
Posts in multiple Categories different single.php
I am smashing my head against some code.
Here is the situation:
I have one post in 3 different categories, this post has to be visible in "category 1" with the single1.php, in "category 2" with ...
- 331
1
vote
3
answers
9k
views
Add Download Button in prettyPhoto Plugin
I would like to add a download button link for the full-sized image on the prettyPhoto lightbox when a user views a photo on my site.
Currently I use the prettyPhoto Media plugin on my site, and I ...
- 245
0
votes
1
answer
42
views
why the posts queried from sql is more than those showed on the page?
i am using WordPress multisite, the issue i face is that the posts queried from sql is more than those showed on the page, the details is as follows:
mysql> select count(*) from wp_137_posts where ...
- 245