hackrepair

Example behavior, video:

That’s awesome.
Though I hope you are not confusing “malware removal” for website security.

Just because you removed the symptoms of the problem (malware) that does not mean you have secured your website(s) in any respect.

Simply removing malware does not prevent the hackers from coming back through the same “hole” they entered through in the first place…

As long as you are not telling people that removing malware will prevent a site from being re-hacked I’m good with your story.

Enjoy!

That works.
Very clever plugin implementation and onboarding process for first time setup. I’m impressed.

Thank you.

I concur.
This is a tragedy…

Wow, you just blew up 20 of my WordPress installs with this one (recaptcha-wise).

Did I miss the “you’ll need to re-enter a v3 key if you wish for your form to function properly…” memo?

• This reply was modified 5 years, 11 months ago by hackrepair.
• This reply was modified 5 years, 11 months ago by hackrepair.
• This reply was modified 5 years, 11 months ago by hackrepair.

Maybe if I did a little Googling first… Duh!

https://www.wpcharitable.com/documentation/remove-amount-raised-donor-count/

So I tried the snippet.
Added direct to functions.php and cleared all caching, etc., but not effect. Any other ideas why the page does not clear those bits noted in the snippet provided?

Page is sandiegoarchers.com/campaigns/range-fee

• This reply was modified 6 years, 1 month ago by hackrepair.
• This reply was modified 6 years, 1 month ago by hackrepair.

Ok, I got that working.
And I figured out the descending order is:

“order”: [[ 1, ‘desc’ ]]

Thanks again!

• This reply was modified 6 years, 6 months ago by hackrepair.

I suppose we need to take this off the forum so we can discuss access so you can log in. Best method?

Thanks!

https://sandiegoarchers.com/results/2018/unmarked-3d-results-06-may-2018

Instead of creating all this drama for yourselves and 1 gazilion UpdraftPlus installs, why don’t you just duplicate the 1.14.7 version as 1.14.6?

I imagine the www.remarpro.com Gods might be agreeable to this given the amount of pain it may be causing for thousands.

• This reply was modified 6 years, 7 months ago by hackrepair.
• This reply was modified 6 years, 7 months ago by hackrepair.

Ouch!
…so now I have to do that on my 400+ websites one by one…

Thank you for the weekend bonus!

So far so good. Guess we’ll see in a week or so.

Ok, got it working by first deleting the plugin, then re-reinstalling while logged out of Facebook.

Did same above here as well, but page still shows:
Please check that this widget Facebook Reviews has a connected Facebook.
Other ideas?

The benefits of open source content management systems like Drupal and WordPress is the exponential growth potential both user and developer wise (i.e., lots of people can improve it faster). That said because the underlying code is open and so many people are involved in writing their own code, there is no single set of perfect security coding practices that everyone follows.

Human beings make mistakes and “hackers” will try to take advantage of coding errors or techniques they learn to exploit weaknesses in the code. it’s what they do.

So in answer to your question, Drupal is no more “harder to crack”. Any open source coded platform like Drupal, Magento, WordPress, et al, all have the same weakness if you will in regard to potential exploitation.

Just some words to the wise…as I see this type of situation occur nearly every day.
In 2018, segregation of your WordPress sites is one of the top 3 best keys to security.

Since it only takes one outdated “something” to allow hackers access to all of your websites, I strongly suggest you not host more than two WordPress sites on any shared account.

The more WordPress sites you host in a shared account the greater your chance you’ll be mass hacked in this way.

Analogy-wise, have you ever heard the term “Herding Cats?”
Because each WordPress installation is composed of thousands of “cats” the more cats you herd into the barn the harder it’s going to be to herd them back into the barn if they get out… At the moment your “cats” are currently scurrying about outside the barn. And you are attempting to herd them back in.

Once a site has been compromised, there are literally hundreds if not thousands of ways your hacker may be able to re-access your account. Simply changing passwords or removing obvious hacker users will not solve “the problem.” All are you doing is attempting to curb the symptoms of the attack. It’s likely they’ve placed backdoor scripts through your account at this point.

It might actually be smarter at this point to move some of your accounts off to a separate account, then harden each as best you can.

At least that way if your account is hacked again, you’ll have a better idea which one was the entry point, and you’ll reduce the likelihood all your sites will be hacked again.