Vijay Hardaha

Yes. I am talking about Social Icons Widget.

Here is the screenshot link https://snipboard.io/89ZpNT.jpg

Ok, Thanks for the updates.

Ok, Thanks for the information.

Thank you @wfpeter for your response.

I understand that WordFence has features for the Default WooCommerce login/register pages and My registration page in which I have an issue that comes under the customization category.

However, I want to mention a simple use-case for consideration, as a pretty basic customization of the WooCommerce login/registration page.

If we swap the position of the login & registration forms on the WooCommerce login page so the Registration form HTML will be above the login form by that we’ll have a registration form on left and the login form on right.

so in this case, the issue will generate since loginLocator.locate() will find the registration form first and return the valid status.

I tracked the issue, so in file search.class.php in function htmloutput there is a $wpdb->prepare which is failing because of this kind of SQL syntax.

AND (CONCAT(A.display_name, ' ', A.user_email, ' ',B.meta_value) LIKE '%demo%' )

I am guessing '%demo%' becomes a placeholder inside $wpdb->prepare, hence prepare return empty value and in result, I am just getting

ORDER BY 
{order_by}
 {order} LIMIT {offset},{count};

in $default['sql']

• This reply was modified 2 years, 2 months ago by Vijay Hardaha. Reason: fixed the code formatting

Output of $default['sql']

ORDER BY {order_by} {order} LIMIT {offset},{count};

Output of $sql

SELECT * FROM wp_tinvwl_lists WHERE status='public' ORDER BY date DESC LIMIT 0,10;

Output of $data

Array
(
    [status] => status='public'
)

Search input is also missing in queries.

Hidden mobile is enabled in your carousel section, disable that from that section and you should be able to see it on mobile as well.

Add this custom css using Theme Customizer

.woocommerce .checkout-coupon-toggle > div.woocommerce-info {
    font-size: 18px;
}

Use add_meta_boxes hook instead of using admin_menu

Updated code will be this.
add_action( 'add_meta_boxes', [$this,'news_meta_boxes'] );

Malware will come back if you still have any infacted plugin active. There is no way to find out which plugin is infacted, the best you can do is to deactivate all the plugins and delete them and install the fresh plugin from the trusted source.

Hey,

I think those too many .htaccess files are due to malware infaction. I would suggest to rename wp-admin and wp-includes folder to something else then download fresh zip of WordPress and from the fresh zip upload wp-admin & wp-includes folder in your server.

Make sure you rename those folder so that we could get rid of all the infacted code and files from old files.

Then you should be able to get access on website. Also, in public_html’s .htaccess use the fresh htaccess code.

Once you get access of website scan your website with WordFence or anyone security plugin.

If you have installed in infacted plugin then please delete that plugin as well otherwise it could infect the website again.

Ok, You can open File Manager in the root(/public_html/) you might find the error_log file, you can open that file and check the error log.

Good to know.

The Users page lists 3 Administrators, but when we actually click on it, there are 0 Administrators. We are also unable to change this via Users > Change role.

Can you please tell how did you access users page without admin role? if you’re an user with Editor role then you can’t access users page.

Can you also tell if you’re using any plugin to customize the role capabilities or in past you renamed any role or change any capabilities?

If SSL is ok, then follow these steps

1. Remove all the custom things from wp-config.php that you added to solve the issue.

2. Make sure site url and home url is using https:// you can access DB from phpmyadmin and check options table and change things manully if they are set to https://

3. Now access website https:// and you should be able to login in 1 or 2 attempt

4. once you will loggedin install “Really simple SSL” plugin and activate SSL

5. now you’ll be loggedout and will be asked to login again with https:// url