houlejo

@esmi : Ok. Thanks for the info.

@cwinkler78 Wow thanks! I was looking deep in the DB for answers… and it was so simple ??

@esmi

I can’t be sure it’s a core issue. It was a guess because it’s my second wordpress site hacked with this since yesterday.

Websites have nothing in common except Google Analytics Plugin.

Also, they are at the same hosting company, but on 2 different shared servers under 2 different accounts.

I run all the recommended security setting of WSD Security plugin.

I will do the config.php 444 and up a level.

To all:
I also say that the hack broke the “sidebars_widgets” entry in the database. Had to restore it from backup.

Also, some chars are broken and I don’t know why… “ex: The companya€?s customers”.

Thanks for the help.

I discovered that it’s a SQL injection attack.

It add a “widget_text” under the wp_options table.

Also, the text

[Code moderated. Please do not post hack code blocks in the forums. Please use the pastebin]

is also in the wp_options table under “blogname”.

I guess that until wordpress publish a security update, it will be hard to stop those attacks.

@cwinkler78 : Where is the script located (document.documentElement.innerHTML = unescape)?

Ok I had this problem :

https://dmadan.wordpress.com/2011/11/02/e-animatedproperties-is-undefined/

I updated the jquery.easing.1.1.js file in my theme to the 1.3 version. I changed the references in other files from 1.1. to the 1.3 version.

Solved, it was a jquery theme conflict.

I checked with firebug and I have this error :

f.easing[e.animatedProperties[this.prop]] is not a function

…function(){d&&d.onload(0,1)}}}});var ce=a.ActiveXObject?function(){for(var a in …

jquery…r=1.6.1 (line 18)

Any idea to resolve this ?