Kevan Pegley

Thanks. Aargh! Needed more than coffee!

Anyway I installed WordFence—which has to be one of the best documented plugins I’ve ever used. It found a stack of dodgy php files scattered around my site, plus some spurious code inside my wp-config file, which I excised manually.

All is now clean, and I’ve changed, and strengthened, my login passwords to the site and the host.

I did notice — because I received an error message after I’d changed the site admin password — that I’d provide the login details to IFTTT. Maybe I shouldn’t have done that? Anyway, no more. Shame, because I used IFTTT to post on Twitter when I publish a new blog post.

Here’s what is in the idmqlsou.php file:

<?php
[malware code redacted]

• This reply was modified 5 years, 4 months ago by Steven Stern (sterndata).

Thing is @plav my hosting provider says they don’t support imagick above PHP5.6. So I think we can exonerate WP5.2. It’s quite correct in reporting that imagick is not installed.

I have no idea what exactly imagick does, and how it compares with GD. My site certainly doesn’t seem to have any issues with images.

Hmm. I’m not comfortable adding that to the php.ini file since my host tells me they don’t support imagick.

I’m minded to leave things as they are, and assume for the time being that GD does the same job as imagick.

Thanks for the two-cents-worth.

Thanks Antonio.

I’ve since discovered that my web host does not accept imagick under PHP 7.3. They run GD module instead.

Thanks for the replies @aoking and @clorith My host now tells me that they don’t support imagick above PHP5.6. Instead they use the GD module, which does the same job.

Sound reasonable?

Thanks Antonio. Except I don’t really understand your answer.

I have now reposted this question under ‘Fixing WordPress’ since it had nothing to do with the Health Check & Troubleshooting plug-in

Update to earlier post: the problem appears to be the font setting. I reset all the BLB settings to default and the logo and images reappeared. The one setting that made them disappear was changing the font from Arial to anything else.

Weird!