All internal malware scans return zero results.
I’ve compared fresh files with current ones using the usual culprit injecting files (head,footer,index. wp-config, theme files, etc) all are clean.
htaccess looks normal to me.
modified dates on files don’t show anything being changed in the last month.
Admin page(s) don’t redirect, all public facing pages do.
I didn’t have a recent files back up (I should know better) but I did refresh my database with a back up that should have been several days/week before the hack happened.
Is it possible this is a host hack? The page will fully load and then it gets redirected.
-
This reply was modified 5 years, 10 months ago by joeblow.