drosehill

For plugins … it’s quite the list, but I can send privately (if possible).

Theme: Verdandi (using a child theme to preserve my modifications)

@hartmantam

Facing the same issue with the plugin

Hey! Just to say that I’m looking for exactly the same thing.

I have a pricing table that I’m sending to clients in several countries _ and I would like some plugin that could pull in the latest FX rates so that they can switch between seeing the prices displayed in USD / EUR / GBP etc.

Presume it’s the exact same use-case as you.

Weird that this doesn’t seem to already exist!

• This reply was modified 4 years, 10 months ago by drosehill.

Hi @tylerthedude – and thanks for the response!

Agh, I was thinking just that.

The new server my host migrated to is running PHP 7.2.

They deleted my accounts on the older server after the migration, so I’m not able to check what version they were running — or what extensions were enabled (it’s only shared hosting so I don’t have SSH / root access).

I tried the debug mode. It threw up one plugin error so I deleted that plugin but now there’s just nothing but that error when I load the homepage.

Seems pretty safe to say that it’s a server-side problem anyway so I really hope that my host can resolve the issue — they’ve just taken down 20 WordPress sites I operate!

Hi MIchael,

Thanks for the response.

I cleared the cache but the issue persists.

Running: Version 77.0.3865.75 (Official Build) (64-bit)
OS: Lubuntu 19.04.

Discrete accounts in one shared account (well, now in separate reseller Cpanels)

Thanks, Pete. Should have thought to try decoding them.

The All in One option I used seems to have brought in the SQL databases (I added plugins and all the settings were already there).

I’m guessing that these files are being injected by one of them (if not the posts table perhaps the malware took over one of the plugins?)

But again, I’m not sure whether these are malicious. In the previous attempt there were obvious injections (e.g. changes to /wp-config.php) that left little doubt. But these ones I’m not sure about. They’re also not being flagged by WordFence.

I didn’t copy anything from the /wp-content directories so if these are malicious then a backdoor is the only possible explanation. And I’m guessing that if the only thing that was copied was the SQL tables that it would have to be injecting from there

Yup.

They’re all a one line string.

E.g.

“Lm11aHlkaWFmb3VuZGF0aW9uLmluZm8=|OTAwMC5tdWh5ZGlhZm91bmRhdGlvbi5pbmZv”