Dangerous malware or false alarm?

Hello we had a huge issue with code injection (malicious 307 redirects) that we managed to deal with. However it is highly possible pieces of code have been left in our website.

I would like to ask your opinion on the following. I had trouble with the wordfence scans completed and after trying several things i decided to post here.

Thank you for your time guys!

File: /parts/none.php

{__ ‘Apologies, but no results were found. Perhaps searching will help find a related post.’}

{/if}
</p>
{if $wp->isSearch && !empty($_REQUEST[‘a’]) == false}
{searchForm}
{/if}
</p>

</div><!– .entry-content –>
</article><!– #post-0 –>

File : JS.php

* /matthiasmullie/minify/issues/91
*/
$content = preg_replace(‘/else;/s’, ”, $content);

/*
* We also don’t really want to terminate statements followed by closing
* curly braces (which we’ve ignored completely up until now) or end-of-
* script: ASI will kick in here & we’re all about minifying.
* Semicolons at beginning of the file don’t make any sense either.
*/
$content = preg_replace(‘/;(\}|$)/s’, ‘\\1’, $content);

file: /search-form.latte

{*********************************}
{******** IS SEARCH PAGE *********}
{*********************************}
{if $wp->isSearch && isset($_REQUEST[‘a’])}
{var $pageType = ‘search’}
{var $searchQuery = wp_parse_args($_GET)}

There are more like this. Any idea welcomed. Thank you all!

• This topic was modified 6 years, 4 months ago by George Chatzifotis.
• This topic was modified 6 years, 4 months ago by George Chatzifotis.
• This topic was modified 6 years, 4 months ago by George Chatzifotis.