Hi there,
during the last week my site has been hacked several times. I have now updated everything; WordPress, plugins and now also the Newspaper theme.
But they still get in somehow and enter a piece of code in the WordPress files.
They keep inserting the following line of code in the index.php:
require( dirname( __FILE__ ) . ‘/wp-blog-start.php’ );
And then there’s an URL (to an adult dating site) in the wp-blog-start.php file so at least the front page of the site is 302 redirecting to this shady site.
How can I solve this problem?
Hi,
Please make sure that you do not have any plugin that can make this problem, also please change all your login credentials, also please check the below articles:
http://securepress.org/tutorial-how-to-remove-malware.php
https://wordpress.org/support/topic/malware-removal
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
I hope this helps.
Thanks.
