Hello,

if I come to you it’s because I did some testing before I talked to you about it.

Disabling all plugins, to keep only the plugins of the theme I have this in gtmetrix: https://www.screencast.com/t/gDLKPyhs

And by reactivating my plugins I get this: https://www.screencast.com/t/FjUMyCxY5MMp

I also test with gtmetrix the demo that you propose and I see that for the Minify JavaScript and CSS, you are 100% : https://www.screencast.com/t/glcmYdjkaB
Maybe by knowing what you did on it. It could help me …

Thank you in advance for your answer.

And sorry for my english, I’m a french who did not do a lot of studies ^^

Cordially.

Hello, thank for reply 🙂

I think I have found a good plugin for wordpress.
it intercepts calls to Google fonts in a page, and it will check if there is a local version of the font (on the server where the blog is installed), otherwise it will download it and then replace the link to offer this copy local.

it works well on my blog, the scan gtmetrix proves it well ==> https://gtmetrix.com/reports/bpe.fun/svwtBofU

Only I do not know if the code is clean and really valid for wordpress, knowing that the plugin was made in 2015 and is no longer maintained by the developer.

Here is the plugin ==> https://blog.seboss666.info/wp-content/uploads/2015/01/bl-google-fonts.zip

I have another question that I think could even better optimize my blog, in the gtmetrix report and in the yslow tab, it says to me:

There are 2 components that can be minified

inline <script> tag #22
inline <script> tag #23

What is this?

Cordially.

• This reply was modified 8 years by Guims.

Hello,

did you watch Requirements for Newspaper ==> https://forum.tagdiv.com/requirements-for-newspaper/

Hello,

I find how to enlarge the login window, I give the code, if it can be used by other members of the forum

.mfp-content .td-login-wrap {
position: relative;
height: 510px;
}

510px is enough for me, but you can change it if you wish.

Thank you again for your help

I come back to you, I delete the complete cache of my computer and now the class td_display_err td_display_msg_ok, is displayed well, see screenshot: https://www.screencast.com/t/ZAN8iMjnQx

But as said before, the button to create an account, is almost no longer visible: https://www.screencast.com/t/xAoOU9KkDz

Cordially.

No it does not work, with this code I hardly see the button create an account. https://www.screencast.com/t/xAoOU9KkDz

And the class td_display_err td_display_msg_ok remains at 900px by 39px. https://www.screencast.com/t/iB9b4srWGfN

Cordially.

Hello,

.mfp-content .td_display_err {
top: 115px;
}
has moved well below my login or registration, however once registration is done, I do not fully see the confirmation of registration message: PLEASE CHECK YOUR E-MAIL, DOSSIER INDEX OR SPAM, THE PASSWORD HAS BEEN SENT THERE.

https://www.screencast.com/t/iB9b4srWGfN

as you see with my screenshot, I try to do it myself with the tool chrome inspector but I can not do it, can you help me please

Cordially.

Hello,

How to make the error message or the registration confirmation message remain in the frame, it looks like it’s an error in the theme, maybe because I use French, I do not do not know.

I do not know the css, could you help me please?

Cordially.

Hi,

go to admin wordpress => Newspaper => Theme panel => Translation => Click to translation and search

https://home.openweathermap.org/users/sign_up

it would be nice to be notified of a new update … by email or a notification on the wordpress administration

open in new tape?

I do not understand there … I am french and I translate with google translation.

maybe you want to open it in a popup???

• This reply was modified 8 years by Guims.

it is enough to modify :

< a href="#" target="_blank"> your html code for the image </a>
by
< a href="link http to your sponsor" target="_blank"> your html code for the image </a>

remove the space between < a

• This reply was modified 8 years by Guims.
• This reply was modified 8 years by Guims.

your advertising is displayed well and opens your site in a new window ==> http://www.responsimulator.com/?url=theinterpress.com%2Fnewsite

this address simulates the browser of an iphone.
maybe that your phone uses an advertising blocker

use cache plugin ?

read ==> https://forum.tagdiv.com/topic/oneall-social-login-with-newspaper-theme/

is not possible for the moment …

screen please

Hello 🙂

watch this tutorial ==> https://forum.tagdiv.com/how-to-make-the-site-faster/

I think it’s hard to understand, I’m French and I do not speak English and I do not understand it either …

Would you have screenshots to show me?

Hello Chris S, 🙂

As I said above, I reinstalled a wordpress all clean, I then add the theme I downloaded from envato and then I added my plugins one by one (I scanned all these plugins on virustotal to be sure that there is no malware). And I see that today sucuri tells me that all is well! Coool ^^.

I think he had to remember my previous scan.

Otherwise I followed your topic on secure wordpress:

– I changed all my passwords by putting very strong passwords for my FTP account, my database and of course my wordpress account.

– During the wordpress installation all clean, I changed the table prefix which was wp_, which I think too sensitive. So I put 15 characters (uppercase, lowercase and number) before the “_”.

– I deleted ALL the plugins and theme that I do not use.

– I added a plugin that backs up my database and my ftp every day, and that sends it to me on drobox and a remote ftp.

– I also have a plugin that automatically updates ALL plugins updated if necessary.

– This morning I added a plugin named “WP Cerber”, which protects me well wordpress and blocked me attempts to intusions (131 ip blocked trying to access my wp-login page when I disabled it)

– I also have the plugin Shield Security, do you think there would be conflict in both ???

I think now I’m secure, what do you think?

I really want to thank you for the help you have been able to bring me

I followed your topic … really

I reinstalled a blank wordpress with the latest version 4.8.2, then I inserted your theme on it, I resumed everything, because with what you gave me I could not do anything, I always had the malware in my blog, so I started everything again, my blog was very small so it was much faster, with what you gave me I spent more than 15h trying to remove the malwares, without any result, but what I say about my previous message today is for a blank version of my blog

is it possible that sucuri guard does not remember the scan of the day since my blog?

Hello, I do not talk about the theme but plugins that I will add on my blog. Is the “total virus” site suitable for scanning malware?

on the other hand, my blog is reinstalled, I added some plugins that come from the wordpress repository, but when I do a scan of my blog on sucuri with https://bpe.fun, it tells me that my blog has a malware and if I do a scan with https://bpe.fun/ it tells me everything is fine.
I do not understand …

Hello,

First of all, thank you for your help. I did not manage to remove the malware so I reinstalled a blog all clean and I followed your security tips for wordpress blog. now I would like to know if it is possible to scan the zip file of a plugin before sending it in my administration? Before I install it.

Thank you in advance for your answer.

I have just seen that I also have this code in my page as a visitor:

<div style="position:absolute;top:0;left:-9999px;">Did you find apk for android? You can find new Free Android Games and apps.</div>

Please help me …

Well, after hours of research, I found some leads. I hope to retrieve my blog as it was before!
I will detail my research and hope you can tell me if my research is sufficient.

1-
in the wp-includes folder, I have 3 more files than in version 4.8.2 of wordpress (I put its files online in version .txt)

wp-includes/class.wp.php ==> click here

wp-includes/wp-vcd.php ==> click here

wp-includes/wp-feed.php ==> click here

I do not know the coder language but I think I understood that its files try to create a user in my database with administrator rights and then insert code into my themes files. am I right ?
I can delete the 2 users registered on my blog and I checked my database in the table users and usermeta, I think it is good. I think ….

To search further, I installed the Quttera Web Malware Scanner plugin and I performed an internal scan of the entire blog. in addition to its 3 files it tells me that there are other suspicious files (I also join them as a precaution):

/wp-content/themes/Newspaper/includes/wp_booster/wp-admin/panel/td_view_update_newspaper_6.php ==> click here

Severity: enMaliciousThreatType
File: /wp-content/themes/Newsp/.../td_view_update_newspaper_6.php
File signature: 814e64bc5a2f806f056be20e6426d120
Threat signature: 9632714c466ed4838165e9057dfb18c5
Threat: <?php if (empty(
Details: Malicious PHP Script

/wp-content/themes/Newspaper/js/tagdiv_theme.js ==> click here

Severity: enPotentiallySuspiciousThreatType
File: /wp-content/themes/Newspaper/js/tagdiv_theme.js
File signature: 6de7782788357b741a2703a368cf4f0a
Threat signature: dce48b63cbaf409a3bd5edb9042e7628
Threat: 'Y-m-d\\TH:i:sP'.rep
Details: Suspicious obfuscated JavaScript threat

After all his research and removal / replacement of infected files, I still get this message: