Still unable to access dashboard please help

Do you have the same issues on your localhost install?

No the dashboard seems to be working fine, I only have the new theme on it I dont have anything else i.e. plugins etc

I have now uploaded the theme to my themes folder in wp-content

So there’s no point in working on localhost because you don’t have the problem there.

At this point, we’ve reached the limits of what I can offer (everyone here is a volunteer). You should consider hiring someone so that you can give them direct access to the site for a far more efficient fix than we can provide here.

Please try https://jobs.wordpress.net/ or https://jetpack.pro/ and do not accept any hire offers posted to these forums.

We will keep this thread open, unless it veers too far off course, in case someone from the community is willing to provide further help here for free.

@sterndata

Thank you for everything that you have done to help me I may just try downloading my folders wp-admin wp-content and wp-includes from my present site and uploading them to the new theme to see if it works.
If not then it is looking like a rebuild.

Thank you again.

Hi @kevinackford, I’ve seen this issue a couple of times now. The site has been hacked and to every folder (or at least most of them) a .htaccess file has been added with the code from your original post. You’ll need to delete all those .htaccess files and clean the .htaccess file in the root of your site.

The code blocks the execution of PHP files, except the malware files that are listed in the second part of the code.

I haven’t read the complete thread, but when I quickly scanned it, I didn’t see this piece of the puzzle mentioned.

It’s best to hire someone who can clean your site, but you should know that everything can be recovered, so you don’t lose your site or need a rebuild. ??

@josklever

I have just had a look and you are right, in just about every folder there is a .htaccess with the coding that I posted before.
I know what my next job is….get rid of the little pests.
Thank you.

To remove all the extra .htaccess files I would use the search function in my FTP program (FileZilla). They have almost the same timestamp and size. Files that have a different size could also contain other code, so you might want to verify that.

The extra malware files are in the root of the site and in some extra created folders in the root of the site. A plugin like Wordfence Security could be used to find other infections. But if you’re not experienced with cleaning sites, I’d advise to hire someone. I could do it, but the UK is not in my working area, so I hope someone local can help you. ??

Good luck!

@josklever Thank you I got someone to clean the site etc. I got hit by the Japanese Hack but all sorted and working fine now.