tmedler

Please forgive me, as I really have little idea of what I am doing in web development and php. However, I need to have an .htaccess in my root directory to force PHP 5. Should all of the following be in there?:
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

I was wondering about the ReWrite rule…

Thank you for the workaround!

Now to figure out how get_footer is getting redirected. My thought is that it must be an outside url, as the text “WE DID” is not in any of my files and is not anywhere in my database.

Fortunately, I’m not too far along whre I can’t just blow everything up and start over with a fresh 2.8.4 and fresh database.

It also shows up in clean uploads of the default and classic themes.

I deleted the “get_num_queries” and it is still there. I also have another theme installed that didn’t have that code in the footer and it still shows up.

Whatever this is…it is spreading.

A new google search this morning comes up with about 10 different sites with the “WE DID 0 QUERIES” at the bottom.

I searched a dump and didn’t find anything. I should note that it is very full of garbage for something that hasn’t been up for very long.

It appears that whatever is there is getting added in the main content block.

To follow up, it definitely has the signature of being hacked:

https://www.stlucaslcms.org

Upgrading to 2.8.4, deactivating all plugins and changing to the default theme didn’t change anything.

There is a “get_num_queries()” call in the footer for all of my themes, but it is not in the right place for where this is showing up.

I can’t find where this is coming from anywhere!