pandoraslunchbox

just to clarify, I am not a coder and i don’t create “scripts” of any kind. I am just a user of wordpress with no resources to buy my future company web design elswhere.

I have installed no unofficial plugins or themes – only ever those directly from wordpress dashboard.

So my conclusion that the infection came from wordpress plugins seems logical to me. Unless the “vulnerability in your scripts” means via an infection that my own computer has had separately and somehow passed on to wordpress while I was logged in to the admin dashboard?

Is that possible?

I’m following various trails to find the culprit of this infection and it may take a a very long time as i’m not a web security expert.

I can say that I was mistaken, and the above code appears to be part of moesia, and not part of the infection.

My web hosts say the infection is very likely to have come from a plugin and I’ve no idea how to find out which one or rule out which ones are not responsible.

So i’ve deleted them all for now and will add them all back as and when I learn more.

I’d like to delete this post but can’t see how. All I can say is i doubt it’s this plugin

thanks I will look at this list. My webhost says “malicious files was uploaded to your account due to vulnerability in your scripts or you have installed infused plugin or themes from unofficial resource.”

I only ever use plugins from the wordpress list inside dashboard. I don’t know what they mean by “vulnerability in your scripts” , but perhaps i will after i look at th above list

the css on both my sites is identical
so is the front page layout content

and I can’t even find the HTML in my sites control panel files
firebug identifies it as this

<button class=”menu-toggle btn”><i class=”fa fa-bars”></i></button>

OK JUST had another look. It appears my English site’s front page was hijacked by some advert spmammy rubbish.

it contained a long list of links to advertising sites, in French,
I re-added all my lost moesia widgets and it is getting back to nearly what it was before –

the odd three-lined menu drop down icon appears to be the source of the hacking on the page

It looks like this – screenshot of it viewed with firebug

I don’t understand how someone did this. Or even why.

I have hardly any visitors to my pages, it isn’t even a going concern yet it’s just a start-up. I’m unemployed. Why on earth would anyone try to hack this? Idiots

?? but sadly doesn’t work on the other almost identical site here https://fr.pandoraslunchbox.eu/wp/

I’ve also noticed that it does work as before, where the theme default images remain

and also for the other widgets ??

works like a dream THANK YOU!

if I click ‘default’ the #fff appears in the box,for a while, but then always appears as FFFFFF when I select the colour option again, or when I select save and publish

have tried to insert #ffffff but it keeps flipping back to FFFFFF

I tried to clear the background colour on the service section of customize appearance, but it keeps reverting to FFFFFF. i also tried using the default colour but to no effect

I can’t see a problem with plugins

example ; front page, ‘our menus’ which is the services widget, should have

https://pandoraslunchbox.eu/wp-content/uploads/2015/01/fresh-pasta2.jpg

set as it’s background image, so that a parallax effect is created with the larger,page background image. It worked fine before the update. i am just disbling some recently update plugins to check it’s not them

It’s the widget images that are missing, I used frontpage/’my chosen widget’/edit row/theme/background image

they are all still added, but none are visible since updating the theme