miguel-alas

Thanks @dragosvrejiu it worked well!!

I think that should be integrated as a natural option in the plugin. I guess you have already thought about it.

Have a nice day!

I have same js error too.
Any suggestion support?

Yes it still fails but what I did was a wp 3.5 clean installation in a separate directory and export the content from the buggy site to the new one and it’s working as it has to be.

The buggy site had 3.4.2 version and updated to 3.5 through WordPress not from the host (iPage.com) control panel. However I made the new installation through the iPage Control Panel with a new DB.

Thanks guys!

Hi Mike the only plugin I have installed is Ultimate Coming Soon but even after deleted and installed the latest version I had no success.
I uploaded a new image and made no preview only when edit button is cliked. you may see here what I mean: https://www.box.com/s/2gns3rfps5m6hbq5y25s

I already did changed permalinks as you suggested and even deleted .htaccess file but remains the same. I even uploaded a new image after and doesn’t create the preview but I click edit image then it display it but after small edit and save returns no preview again.

I was using Ultimate Coming Soon plugin but deactivated and the problem remain the same. .htaccess has not been modified
DirectoryIndex index.php
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Maybe someone else has the same problem with preview images.

The site is under development but you may see https://www.box.com/s/alomlm7870es3gkutk02
I’ll put in online for a while.
cainversiones.com

Some images are from external url and they show well.

Nice to know that sagitt000, you’re welcome.

I think I found a fix: reading a topic “Malware in header.php” in wordpress.stackexchange.com someone found a code just above wp_head() and cleaned the code but this reappeared after a few hours.
I looked for something similar but found nothing suspicious.
Just in case I commented 2 lines above wp_head() like this

<!-- <link rel="pingback" href="<?php bloginfo('pingback_url'); ?>" />
<?php if ( is_singular() ) wp_enqueue_script( 'comment-reply' ); ?> -->

Then reloaded the sites several times and now seems to be ok: no message, no encrypted script when seeing page source, no wscripts.org trying to load, etc. Now the site even loads faster.

I made some secure fixes too.

If happend again, I’ll let you know.
Hope that this may be useful for someone in similar situation.

What these scripts do? see here jsunpack.jeek.org/?report=5d8ae442e40470d7ae06a58ea08d8e412110992b

any idea??

Good point ichpen, also there is anothe code called imwb_cab_script.js
[IMG]https://i47.tinypic.com/dpww3b.jpg[/IMG]
As you can see it is from a plugin installed in wscripts called convertactionbar-pro.
As it says in sucuri.net report “Malware is hidden at the index.php or index.html files”, how can we find it if all code seems to be ok, apparently.

I think it is related to some themes if you make a google search, there are several wp sites with this problem. After changing the theme the problem disappear but the best is to know how to get rid of it with whatever theme.

I’m having the same problem. I already used sucuri.net to check but it didn’t find anything but still getting the error. I checked Page Source from my browser and there are 2 encrypted scripts above the ending header tag, but it’s not in header.php.

The 2 scripts have “eval(unescape” at the beginning and when page is loading in the status bar appears 2 sites: wscripts.org and jquerey.com
Also when inspecting with Firebug the loaded scripts there are 2 called pop.js and imwb_cab_script.js.

Question is how to remove these codes that appear in the browser page source.

You can see the encrypted scripts here

Any other solution on how to get rid these codes?

Thanks!

I’m having the same problem. I already used sucuri.net to check but it didn’t find anything but still getting the error. I checked Page Source from my browser and there are 2 encrypted scripts above the ending header tag, but it’s not in header.php.

The 2 scripts have “eval(unescape” at the beginning and when page is loading in the status bar appears 2 sites: wscripts.org and jquerey.com
Also when inspecting with Firebug the loaded scripts there are 2 called pop.js and imwb_cab_script.js.

Question is how to remove these codes that appear in the browser page source.

You can see the encrypted scripts here

Any other solution on how to get rid these codes?

Thanks!

Did you check out General Settings?

“This requires the “Anyone can register” Membership option to be selected on your WordPress General Settings page.”

I had the same and just checked in the “Anyone can register” option and solved!