niksudan

Marking this as resolved.

Sorry for the late response.

The location meta is just a string the plugin uses to calculate the latitude and the longitude. If you specify the post’s lat and lng, there’s no need to assign a location meta. I think it should work, but I haven’t tested it in a while.

I don’t have time to build something from scratch, but I’m here to help out if you run into any problems with the plugin.

Currently I’ve just cleared the content and left a comment in it just in case there’s some sort of check they do to see if the file exists.

I see what you mean with the php injection – it’s done that to my files too. I can’t figure out how they’ve managed to do that (files are only writable to owners on server), so by clearing the content it would make their javascript invalid if they tried to run it again in the future.

Edit: I’ve just realised that php files can be edited through Appearance > Editor. This might be how the php files were altered.

I had this problem with a site, and the wp-includes/js/jcrop/jquery.js file seems to be causing all of this. Looking at the file’s source, it isn’t a jQuery library at all. Turns out that file has a bunch of code encoded into hexadecimal values. After translating it, it basically appends the appropriate tags to the document. After removing all the content from that file, I don’t have that problem anymore.

Decoded file