finalrune

Alright, well thanks for putting me on the right track! At least I know where to work on fixing it now.

Thanks… OK… let me see if I get this.

The page I’m using this on is here: https://www.revisionenergy.com/maine-nh-solar-contractors-installers.php

This is a static php page that uses a WP Query to find posts through the WP loop that match a custom post-type called “Staff.”

In the content of the post-type staff, is a field ’email’ which is correctly ‘protected’ inside of WordPress as on: https://www.revisionenergy.com/blog/staff/geoff-sparrow/

However, on my PHP page it says ‘Email: geoff(Replace this parenthesis with the @ sign)revisionenergy.com’

I believe this is because the line above is what is actually in the WP database for that post…? Is there a way to run your plugin on top of the loop, after everything loads, to re-create the ‘protected’ emails with links?

Thanks… great plugin by the way!

I made a pretty crude hack, replacing where it makes the i.php call with the end parameter &s=thumb to &w=100 and that seems to (sort of) work. The hard width at least comes up (because the image is cached) though some are not the right proportions (say if you have some tall and some wide images). Still, this was a better fix in my situation rather than replace all of the shortcodes site-wide

(see one of the ‘album pages’ linked to from the google map on this page: https://www.revisionenergy.com/blog/maine-new-hampshire-solar-energy-projects/)

Darn ; my company’s website extensively uses the album shortcode. We could just eliminate it, but I wonder if anyone (Simbul or otherwise) could consider updating the plugin? We’d be willing to hire a developer to work on it, rather than deal with the hassle of finding a different plugin

Should note – I also completely rebuilt WordPress per article suggestion, fresh install of 2.8.5, new plugins, fresh theme, etc.

Yum, yum.

I dug around a little deeper based on your suggestion and came across this article which summarized my experience nicely: https://linux.byexamples.com/archives/397/wordpress-exploit-we-been-hit-by-hidden-spam-link-injection/

Sure enough, there was a internal_links_cache stashed in wp_options that was injecting the nasty links. Removing that got rid of the nasty links.

I’m still experiencing a weird symptom where only the 1st post in the loop is being displayed to Google (the others appear just as headlines only), also, a bunch of ? characters just appeared all through my posts and I’m not quite sure why…