captainlightbeam

I refrained from using Press This for a day. My mystery “wp.n” files are still appearing. So it looks like it is not Press This that is doing this. Good!

But now what? How the heck do I track this down? How is what I describe even possible?? That is, it looks like “something” in my WordPress installation has write access to the root level of my hosting account. Eeeeek!

I came across this post because I was searching for info on the Avada Portfolio pages sub menu.

To reply to your question… the positioning of that menu is somewhere in the css. Finding where that happens is the trick. I have found Firebug (in Firefox) to be a great help for hunting down such things. I poked around a little and did not find an answer however.