Hi!
For years we use Newspaper theme (ver. 9.5). It works stable and without any major problems. But now would like to update it and I would like to aks, if update can be done directly to latest version (12.6.5) or it has to be done graduatelly (upgrades with all minor versions in between)? I’m asking that because I don’t know if any current customizations will get lost or will be preserved? With minimum tweaking possible.
And, there is a minor problem with Tag Div Composer plugin, which gets disabled randomly and page then show codes [tdc_zone][vc_row][vc_column width=”1/1″] etc. instead of content. Can this be somehow fixed? There are only few plugins installed (besides TagDiv’s which comes with Theme). I start temporarily disabling them in a hope that I will found a plugin which is responsible for disabling. Currently only 4 plugins are enabled:
- Contact Form 7,
- Cookie Notice,
- tagDiv Composer,
- TinyPNG – JPEG, PNG & WebP image compression
Is anyone problematic and reason for “tagDiv Composer” disables?
Thank you!
Hi,
I think that you have malware on the website.
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
You could consider reinstalling the WordPress version, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Change admin passwords and delete admin accounts you are not familiar with;
– Delete any weird/unknown plugins;
– Delete the weird/unknown themes;
– Clean unfamiliar Theme Panel injected code (example – https://i.imgur.com/4q70kCv.png);
– Clean WordPress files (example – https://i.imgur.com/stJCqiK.png)
Please block /wp-json/tdw/save_css
If an attacker wants to target this URL /wp-json/tdw/save_css they can do so. Even if the website uses a different theme, the attacker can still try that URL. We could add an option to be able to enable/disable the Live CSS, it will be considered. But for now in order to remove it this can only be done with a modification to the composer plugin. I think that all that removing it requires is to comment this line of code – https://prnt.sc/RtwvL5Nc4ikR -> https://prnt.sc/ymZmhdUfp57U But as I mentioned, the attacker can still try to access the URL.
If you want, you can contact our custom work team here, and they can help you update the theme safely: https://tagdiv.com/premium-customization-services/
Thank you!
Anamaria: thank you. You give me back a lot of informations. I will try to follow them and in case of problem will return back here.
I just disable / block access to: /wp-json/tdw/save_css. I will leave it for few days just to see if disabled plugin problem is fixed. Then I will also do theme upgrade.
Thank you!
Ok, here are my observence. I deactivate all plugins, except “tagDiv Composer”. After a day, “tagDiv Composer” plugin still get to “Disabled” state. I really do not know why.
Plugin version: 2.3 | built on 06.02.2019
WordPress version: 6.4.4
I coming days I hope I will find a time and try to follow your other instructions and update all stuff (WP, Theme, plugins…) and will return result here or ask / beg for additional help 🙂
Hello,
You need to update the theme to the latest version 12.6.6, because you have malware in the theme/Wordpress files.
Thank you!
Hello again!
I found the root of my problems. It was PHP settings on new server, which were all set to default values. After I raise few of them (memory limit, upload size, post max size, execution time are one of them) everything works like it should again. Soon I will upgrade theme also, but 4 now it’s all ok again. Thank you for you help.
Best regards.
Hello,
OK, please let me know the results after the update.
Thank you!
