Evolvingdoor

I just checked again for an attack IP that I was notified about this past Monday and I still don’t see it in the list.

Hi Daniel,

I’m referring to AwStats (in cPanel) where it gives a list of the IP addresses of the visitors during the month. Since I wasn’t getting the full IP address in your notifications, I am usually able to find the full IP address from the AwStats list. However, twice this month I could find no IPs in the AwStats list that started with the 3 segments in the IP address in the plugin’s notification.

Does that make more sense?

Thanks Tara. I was aware of the first article but not the second. I’ll check that out.

As near as I can figure out, I suspect the hosting account for the site in question may have been hacked. The person probably got the usernames from the WP database, but the passwords would have been encrypted so the hacker would still have to guess at that. Passwords have now been changed and new usernames are being created. I’m going to check the PHP files for nasty code too.

I am concerned that this issue was reported 3 months ago but I don’t see any sign that the developer is working on this or is even aware of it. This is a wonderful plugin, but if there is little or no support by the developer I may need to look for another plugin that includes some support for problems.

I have been going to the client’s list of visitor IPs (e.g. through cPanel) to get the full IP address (all 4 sections), so that I can block these creeps. I would love to avoid this extra step, so that I don’t have to go through this extra step. So I’ll add my name to those who would like to have the full IP.

However, lately even the first 3 sections are not listed in the visitor IP list, which is very curious. Anyone else getting this?

Okay, I’ll see if I can get some assistance from them.

Do you mean (about it being a featured image issue) that it should or shouldn’t be set as a featured image?

Okay, here’s the blog listing page:

https://northernschoolofesotericwisdom.com/category/blog/

Thanks! ??

Agreed about the “cake and eat it too” aspect. ?? I love Firebug and use it all the time, but unless there’s a search feature in it that I don’t know about, I’d still have to examine each page separately. Better to just View Source and do a Ctrl-F find. (“<h4” will catch all H4s regardless of whether there are in-line modifications.)

With a non-CMS/blog (i.e. non-database driven) website, the problem with searching the whole site is that a utility could only crawl based on the inter-page links. You’d miss any draft or unlinked pages. However, I’m a bit surprised there wouldn’t be one for DB-driven sites, since they’re all in one place and it would be a matter of searching the content files/entries. But I might be assuming it’s simpler than it is.

ClaytonJames, thanks for the suggestion, and for the link. I’ve never heard of “grep” before (the term or the utility). The CSS is done through a child file, actually, although I could probably get it all using Firefly.

Also, WPyogi is right, that if I was looking for anything other than a standard tag (with no in-line style modification), it would be the actual files I would need to search.

In this case, I changed the style to a big, bold red style that would be easily seen and just went through all the pages to see if any were using the <h4> tag. I didn’t find any; with any luck, there are no in-line modifications to any H4 tags.

This site isn’t super huge, thankfully, or doing it that way wouldn’t even be an annoying option. It would be nice to have another option for other situations like this, though.

Thanks ClaytonJames for your reply. What I actually wanted to do was to search the entire site’s source code for the H4 tag or for “<h4”, for example. That way it would give me a list of the pages where that was found.

I do have Firebug installed (couldn’t live without it), but to my knowledge it won’t search an entire website like that.

I’ll check out Firefox to see if there are any extensions that might help, though. Thanks!