Zsolt Edelényi

I have injected php php files, and I checked the log on that time. I have found the hacker IP. It started with attack the login.php.

Then:
POST /wp-admin/plugin-editor.php?file=index.php HTTP/1.0
GET /wp-content/plugins/index.php?cookie=1 HTTP/1.0
GET /wp-admin/plugin-install.php?tab=upload HTTP/1.0
POST /wp-admin/update.php?action=upload-plugin HTTP/1.0
POST /options.php HTTP/1.0
GET /options.php?cookie=1 HTTP/1.0
etc.
It all received 200 respond. How it is possible? Could he log in?
Options.php to the root was an injected file.

If I send you the log file, can you tell me what happened?

Thanks. I did not know that. I even did not know for sure that that is a hacker code.

One more question: Is that possible that hacker get in via WP (e.g. cross site script)? Or is it sure that used FTP?

In zselicicsillagpark… I add a new line to header.php:

<link href=”/wp-content/uploads/2015/06/favicon-152.png” rel=”shortcut icon” />

This line is missing from the lines generated by your plugin.

If you update your plugin, you should include this line? And at the end of your inserted code change “start” to “end”

Not working again.

I find the errot in HTML code. There is missing quotation mark.
I copied it to you: <link rel=”apple-touch-icon-precomposed” href=https://zselicicsillagpark.xn--akadlymentes-honlap-tub.hu/wp-content/uploads/2015/06/favicon-152.png>

I would very appreciate if you answer and correct this.
How it happend only with me?

Please answer my ticket!

Gooood!
Would you tell us, what was the Guideline violation? Just for understand the decistion of the plugin administrators.

I cannot help, but I would like to know what happening? There is a plugin page disappeared because guideline violation? This is something new? There are many bad and dangerous plugins in repository and they still there.

Hi Richard,
It does not work for me either. A did what you said: I went to https://somogyivakok.akadálymentes-honlap.hu/favicon.ico, refreshed, but it still not works on the website.

Do you have any idea?

Sorry, I was not clear .
I made a guestbook page. On that page, I disabled interaction.
On the page below the guestbook there is a comment form. In spite of the fact, that I switched off comment form on that page.
Temporarily I put {display: hide} css to the comment form.

My question is the following: how can I switch off comment form on guestbook page on the setting page? Maybe it’s a bug?

I have numerous mobile friendly websites use BPS. Impossible that this plugin has effect on that Google test.