fercher

Problem solved with older SQL database and “handwork”.
As search engines say: iFrame in XML is not good.

“String.fromCharCode(97, 106, 97, 120, 67, 111, 117,”
is highlited as suspicious in the new scan.

Yes, I see it in some lines, for example:
29/Jun/19 12:52:25 #6615384 CRITICAL 115 35.197.206.142 POST /index.php – Cross-site scripting – [POST:wp-piwik = manually <script async=true type=text/javascript language=javascript>var nt = String.fromCharCode(98, 122);var mb = String.fromCharCode(97, 106, 97, 120, 67, 111, 117, 110, 116, 101,…] – netzjahre.com

Such lines where listed before and after another scan, too.

thx

solution here

Last days I updated WP to 5.6.2 .
Now, Ninja Firewall works good,Courage theme works good.
Problem resolved.

My preliminary solution: other firewall.
I will try again ninja fw with the next WP revision.
Thanks

Thx for your reoly.
It looks like this German page
https://webhosting.de/wordpress-backend-designfehler-layout-zerschossen/
(blue text).

Stern and Joy,
thx for your hints. I didit with the plugin prposed by Joy.

Problem solved.

Correction:

If I visit my latest subdomain (created 2019) to look or to edit, then the logfile shows my visit as IP v6 (I do not want this). I don’t guess which file I must edit to get v4.

Problem solved.
Content of
h-t-t-p://notizen.netzjahre.com/notizen/blogtext-landkarte.php
transferred to
h-t-t-p://netzjahre.com/blogtext-landkarte.html
by PHP “file_put_contents”.

This is a hint, not a question.

Best method (phrases translated from German WP):

wp-admin
Jetpack in Dashboard
Configuration
Traffic
Sitemaps
Disable “Generate XML sitemaps”

dineshkashera, thx for your reply.
Some days ago I checked the referred page with help of https://quirktools.com/screenfly , and indeed, it is not a good page for a mobile phone. But the links are klickable.
I think the page as displayed has no influence on my permalink problem.

Regards,
fercher

Thx for your reply.
I use the theme “courage” for the WP, and I tested it with a handheld of a buddy: there where no display problems.
The referred single page can also be viewed by a handheld. It has the old tables, not the new divs/containers.

I think, this matter is off topic.

Regards
fercher

After all, the Jetpack plugin was the reason.
In …../wp-content/plugins/jetpack/modules/sitemaps/sitemaps.php
I disabled the following lines:
`// Add sitemap to robots.txt.
add_action(
‘do_robotstxt’,
array( $this, ‘callback_action_do_robotstxt’ ),
20
);`

Regards,
Josef