Mehdi

I appreciated it, Jeff. It now works fine for me.

If you mean the below tip, I’ve already done it. It doesn’t work.

Second, you can turn on a feature in YARPP to auto-generate appropriate size thumbnails on the fly, if they have not yet been created. Doing this type of processing on the fly does not scale well, so this feature is turned off by default. But if you run a smaller site with less traffic, it may work for you. Simply add define(‘YARPP_GENERATE_THUMBNAILS’, true); to your theme’s functions.php file.

Exactly the same problem, any tips?

Did they also restore the database from backup? Are they sure they went back far enough to get a clean backup? Did you change all your passwords: Database, WordPress Admins, FTP, Host account?

They just were able to restore backup httpdocs and couldn’t restore the database. That’s the problem. I changed all passwords and made wp-admin more secure.

Most hacked sites I’ve worked on were hacked due to outdated plugins or scripts. Updating the scripts and removing old ones being the first step to clearing up the hacker coding.

But during the hack time, the website was fully updated ( CMS + Plugins). I have no idea how some plugins have been infected. Even my RSS plugin has been infected and when a person person clicks on the links, the hacker’s message appears again.

Make sure to likewise review every file on your website as well to ensure no hacker coding remains.

Sure, I’ll do. But how can I recognize the hacker’s code? Where should I search exactly?

Sven, You were almost there. This is the code:

<Files admin-ajax.php>
    Order allow,deny
    Allow from all
    Satisfy any
</Files>

Thanks

You should inform your own host webmaster.

Thank you for your tips, Sven.

I’ve already tried that, it didn’t work.

?? sorry, I’m not that professional.
I just found the file named .htaccess. It was hidden. The file contains the following code:

# BEGIN WordPress

# END WordPress

<Files 403.shtml>
order allow,deny
allow from all
</Files>

I added your code to the above, but it didn’t work ??

Hi Sven D
Thanks for your response.
How can I add the above code to .htaccess I mean where should I add the code?
I haven’t found anything like that.