webmistressofthedark

This hack <u style=’display:none’> continues to this day.

I think they got into the whole server, because all the sites that were hacked were on one that I use, but not the other .

Some sites did not have the remv.php file in the themes folder, but in the themes folder the header.php file, accessible from the control panel, was altered.

Also in the wordpress directory itself one index.php file had some base 64 in the top of it.

Check for strange users, and also repair your database after you change your password.

I hope they can fix this exploit!

Have you checked your theme folders? That is what caused my problem.

/*	Using 'class="alignright"' on an image will (who would've
	thought?!) align the image to the right. And using 'class="centered',
	will of course center the image. This is much better than using
	align="center", being much more futureproof (and valid) */

Make sure your time is correct in your settings.

It may be that the server time is different from your time and needs adjusting.

If you date a post ahead, it won’t show up until then. I use this sometimes on purpose.

Yes thanks.. knee jerk response.
I think this support forum is great.
You have to figure that if you come up on a problem like my recent alignment issue, someone else has too and it’s already solved somewhere.

??

Why are you not editing the theme files from within the dashboard?

I have never had a problem with this.

I am not familiar with CoffeeCup FTP as I am a Mac user and use FETCH.

This is free software so there is no ‘phone’ support.

Point me to your original problem and even I might be able to help.

Your links should be like this

https://empty-purse.com/2009/03/20/what-i-made-for-mothers-day/

Not like this

https://empty-purse.com/contents/“https://empty-purse.com/2009/03/20/what-i-made-for-mothers-day/”%22

All you need to do is write the text What I Made for Mothers Day and then highlight it and then add the http link in the box that pops up.

Looks like you have spaces in there, %22 and all that.

Make sure your permalinks have no spaces at the end.

Is the config file any different in the new version from older versions?

Maybe I should have redone that and not used the older one.

But I have it working now, did it my way.

Went to the front page, and it asked me to update the database, clicked OK and voila, then updated to 2.7.1 in the control panel.

I’m all set but the coders should know that I had the remv.php file on v2.5, and had NO comments or registration open and was still hacked.

I was using 2.5 and had NO COMMENTS or even registration open and still found that file.

I wonder how they got in?

OK I did it all manually.

But I did see it ask me to update to 2.7.1 and did it from within the panel.

Now then, on another thread they are discussing the remv.php file.

They seem to think it is installed through and exploit in the comments forms.

Here is my info: I was using 2.5 and had NO comments open, not even the registration. So how did they get in and put that file in the themes folder?

Weird. I hope v2.7.1 stops this.

OK run this by me again?

After a fresh install of WP, how do I adjust the password on the database?

Can I just change it in Cpanel and then adjust my config file and it will work?

I can’t lose all this info which I have gotten a backup of.

OK seems I was hacked. There was a file in the themes folder and I removed it but now I am going to reinstall.

Here is my question — if I upgrade to the latest WP, how do I fix the password so my old database of content will still connect?