Left Sidebar @ bottom of page

My Wordfence is telling me my wp-config.php file “may” have been hacked and provided me this snippet, 'ZXZhbC at the beginning of the line. I have read this could be something used by plugin authors to hide their coding. Could this be an issue? Otherwise still searching as I can, Thanks

Yes, that could be an issue. Can you copy and post your wp-config file here?

[ Malware deleted, please do not post that here. ]

Yes that file is hacked. Probably all your php files are infected.

The 1st line of that file should be

<?php

your is <?php followed by 1109 spaces then 28,000 of hacky stuff.

If you scroll to the right 1109 chars you will see it all.

PS, dont copy your wp-config to a public forum without removing passwords 1st

Dealt with. ??

@royedw Your site is compromised. Please remain calm and carefully follow this guide.

When you’re done, you may want to implement some (if not all) of the recommended security measures.

well, guess my study of Greek gets put off a while, thanks!! Luv the “remain calm”…. ??

Thanks Jan. Didn’t suspect it would be that.

The remain calm was preferable to “DON’T PANIC!” ??

@bdbrown Just in case you haven’t done so yet, please change your database password (and possibly database user if you can) as well.

As you pasted your wp-config.php file here including the database username and password – no matter how briefly it was here before the moderator removed it -, you should consider them compromised.

@rft – It’s not mine; I was helping the OP. I”m sure he will see that step as he works through the guide and recommended security measures.

I have the sidebar back!~! have to change the other as recommended above but the php< followed by 1109 spaces and “hacky” stuff was it,.. apparently. Also need to continue with the security check. Added this plug-in and ran it… “Anti-Malware Security and Brute-Force Firewall”

Extreme thanks to BD, Jan, Simon Denzel, et. al for your help and patience!!

This Hueman theme is GREAT!! Excellent support. Cold adult beverages all around if I ever see you!!!

Roy – glad to hear it. Please make sure you follow through with the security procedures and recommendations. RIGHT NOW, before you do anything else, make sure you change your admin login and database passwords. Best of luck.