MSGID: 1:229/426 75DDE819
REPLY: 2:221/1.58@fidonet 047fe4de
On 16 Jan 23  14:57:00, August Abolins said the following to Nick Andre:

AA>  NA> I have a customer with a Wordpress site that had similar problems. Oh
AA>  NA> what a freaking nightmare that was... in the end I had to completely
AA>  NA> disable all plugins and widgets until the culprit was found.
AA> 
AA> My approach with WP is to turn off outside access first. Just  
AA> park a landing page with an "offline/maintenance" comment or  
AA> something.

Long story short, this was a problem I inherited long ago because the company 
considered the website to be a techie-thing, therefore techie-things are IT 
department things no matter what. The company tried to save money by hiring a
relative who in turn outsourced the coding of the site to India. The company
also hired a young guy as their social-media/website marketing "expert" who
in turn loaded that poor website with all kinds of plugin and widget crapola.

One of a few plugins was hacked, which in turned caused malicious code 
injected everywhere, on every stinkin' PHP file, and the only way to fix this
was to shut off every plugin, manually clean the PHP files and SQL, secure the
Linux Apache install it was deployed on... and a hefty invoice for my time.

Nick

--- Renegade vY2Ka2
 * Origin: Joey, do you like movies about gladiators? (1:229/426)