Best to edit files via FTP so you can make a back up locally on your HD.

Use a text editor to edit php files.

Good to learn how to do this if you plan to modify files, make backups, etc.

We use Limit Login Attempts at the very least. Change admin username to something else. Harden the config file. Turn off XMLRPC, etc.

See:
https://premium.wpmudev.org/blog/keeping-wordpress-secure-the-ultimate-guide/

Well .. again (sigh) .. .a clean install of WordPress would solve that.

if you DELETE the wp-includes folder and install a new copy then that solves that, right?

Simply go to WordPress.org and DOWNLOAD the zip file for WordPress … follow the upgrade instructions on WordPress.org to upgrade via FTP.

If you learn to use FTP, you can see all your files and directories, and you can easily delete both the wp-includes and wp-admin folders, and upload fresh ones from the zip file for WordPress. And then over-write the other “root” files from the install zip (it won’t over write the wp-config.php file as there isn’t one in the installer).

So, unless you actually do what I suggested which is a clean install of WordPress, not much else I can say on this topic.

There are lots of plugins for this; some like Google’s Feedburner are popular (we use that here). RSS used to be the way to go, until stupid web browser folk thought they’d rather have an app for that (sigh). It can be tricky from your main site, as sometimes you need to setup SMTP email if php mail doesn’t actually send email properly, etc.

Good to take a look at the plugins in the WordPress.org repository but read the reviews/support threads for each to see which actually work and have the feature you want. If you do a lot of posts, most people might be annoyed by that — often a daily summary is more popular. Or, just put your news on your FB page and people can “follow” that — or twitter, etc.

his happens when you update the theme or change themes temporarily.

Yep. We stay on top of all best security practices, especially since we have our own web server, and ran a web hosting and ecommerce company for 10 years (1996-2005). I’m also frequently found in Twitter in the #infosec tag.

We’re also PCI-DSS certified which means our server is massively scanned for known issues on everything from php to TLS 1.1, to known exploit files. We also have Securi scanning, and all sorts of other shenanigans. 🙂

But yes, we keep on top of security. But basically don’t need to do every update to every theme just to stay up to date on features or bug fixes to stuff we don’t actually use.

The way I get widgets to work on home page is to make a new custom sidebar for the home page, and then add that in a column. All widgets work perfectly unless the widget is badly coded or tries to load another version of jquery or inject java in wrong place.

Had one stupid widget that would only work at bottom of sidebar not top as something in it conflicted with the code in the other widget. We eventually dumped that one as being badly written.

Not sure that helps — just some feedback.

I think it’s in the translations options if memory serves … but don’t quote me on that 🙂

I guess you could disable that size from the theme admin panel?

I think it does that because default image format for WP is jpeg not png. And png-8 files are typically color limited vs a jpeg which has a full color range (WP assumes you’re using photos not line art or logo graphics).

Always best to use jpg for photos unless you’re doing transparent effects (png-24).

Presumably you could also go into the main functions file (not the one in the theme root but the one in the includes or booster folder if memory serves) and remove the action hook to build that size and remove the option from the theme panel entirely.

So, if you use jpg to begin with it won’t make a duplicate, was my point, I suppose 🙂

The WordPress bug was fixed in WP 4.4.2 — bug came from WP not from theme. You should be able to fix it simply by updating the version of WP.

Worth exploring the default settings in WordPress panel.

If you go to the WP admin > settings > writing … you can set a “default” post category.

This will automatically be set as the post category once you do a save draft, if no other category selected.

Hi, you can just upload the theme files via FTP which is the best way to do that.

There is no infection in the TagDiv booster and Newspaper theme. So, installing clean version of that is best way.

The simple way to do it is this:
deactivate all plugins, then via FTP, delete the booster plugin in wp-content/plugins/
delete the newspaper theme folder in wp-content/themes

upload fresh copy via FTP of the Newspaper folder to wp-content/themes

As far as infection — I had suggested also doing clean install of WORDPRESS, which is always a good idea if you know you were hacked.

You can often hire somebody to do all this for you if you don’t know how.

And hence why there is coke and pepsi … 🙂

If you run a website for 10 years or longer at some point you find that with major updates the child themes need to be updated too and defeats the purpose. But whatever works for you is what works best for you. I manage 20 sites, some online for 16 years and updated daily, so I do things a little more “time management” focused in the long term. I also don’t update my themes every time there is update as I often don’t need the new bells/whistles requested by others. So, I’m usually many versions behind, and like it that way !

You can edit the widgets in the footer if they are there — or, go to the theme panel and find the footer controls, and remove the “default” setting, to create your own setup for the widget areas. See theme docs re editing the footer.

(obviously, if you’re not using Yoast SEO, for instance you would not need to put in the code for YOAST that I use … you also might not want to remove the versioning with some CDN setups that need that to see new version to recapture … etc.)

I don’t use child themes; don’t believe in them unless absolutely necessary as they are a CSS redirect, which I don’t like. Different from an “includes.” So, ideally if using child theme you would add it to the child functions.php if there is one — but I can’t speak as to it working or not working with child theme. Part of optimization process is NOT using child theme, was my point 🙂

Sooooo….. one of the items might conflict with child theme. I put mine in main functions.php at bottom.

@RingoD
you have a *lot* of errors on your example page, including intellitext failing to execute, etc.

Look at your page source, for any external link it should be target=”_blank” or target=”_new” — if you’re using some kind of plugin to add that on top of default settings and/or you have numerous broken things (based on Chrome/Console F12 check), that might be the problem.

One tip

if you have two ad spots, make one “text ads only” and the other one “text and image ads” …

Usually it takes Google a little while to “authorize” your site for that ad unit/space.

Additionally, sometimes ad units can show up blank due to error in fetching the item. You can usually solve that by switching the unit to “text ads only” — as the rich media, image based ads sometimes just won’t load and if you visit your site every day, you’ll see that eventually.

Try back on your site later 🙂

If you recently updated the theme, make sure you updated the plugin as well … that is usually the cause there. Clear/reset caching, etc.

They started sending out emails to sites with the plugin active during first week of February. If they “detect” your site running AMP protocol, they will send you email with links to check compatibility, and other tips/info on the AMP roll-out.

See the prior threads in forum on this topic.
Simply download the AMP plugin to use this theme with AMP. 🙂

REF
https://forum.tagdiv.com/topic/compatibility-feature-request-with-accelerated-mobile-pages/

• This reply was modified 10 years by simchris.

You may have a DNS redirect hack; not theme related.

Make sure you *DISABLLE* any other mobile plugins like Jetpack mobile, or anything like WP-Touch.

In fact, REMOVE any plugins you don’t actually use! Remove old themes you tried but no longer use.

Check your htaccess file for malicious redirect code; resave your permalinks in WordPress.

Make sure you have full back up of your site also.

Also try doing things like running a page speed check at gtmetrix.com to see if anything funky being loaded on pages you don’t recognize; check the page source of a post on your site where you have a redirection.

Check your Google Webmaster tool tab for “malware detected” — as Google will check this too!

Pre-emptively, you may wish to to a clean install of WP, by over-writing all the WP files in root (make back up of your wp-config.php out of paranoia); delete and replace the wp-includes, deleted and replace wp-admin folders.

MAKE SURE you have a legal download copy of theme from ThemeForest and not something you “found on the web” also! (Ahem, which of course you didn’t do, but one person I’ve seen DID and that was very much a DUH moment for him!).

• This reply was modified 10 years by simchris.

Make sure you have your site setup as “www” in your site settings, and perhaps add explicit full URL to your wp-config.php file. You should only be serving ONE version of the site ideally for Google, etc. — if you have the ONE version setup properly in your hosting and WP config, then WP will auto redirect queries to the other version.

If you’re using a caching platform, CDN, etc., make sure that matches what you have your site set as in your WP panel, etc.

Not sure if that will solve your particular issue, but that is the normal reason.

Also for info on “Security Hardening” your site, see:
http://premium.wpmudev.org/blog/keeping-wordpress-secure-the-ultimate-guide/