Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
|
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
Thread Tools |
03-12-2018, 07:54 AM | #1 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Anyone know what kind of malware is that ?
Got this injected on a file and before remove it wondering is anyone saw this before ?
I'm still a rookie playing around those file so better ask first lol. <div style="display: none;" class="mdlWrap"> <div class="mdlOverlay"> </div> </div> Also i see this in footer.php there is wp_footer(); function . Im sure this should not be there. This is only one wordpress blog affected Thanks |
03-12-2018, 08:57 AM | #2 |
Confirmed Fetishist
Industry Role:
Join Date: Mar 2005
Location: Fetishland
Posts: 11,473
|
first part seems to be harmless by itself, depends what's in .mdlWrap and .mdlOverlay classes in css file.
wp_footer is normal in every wp theme, look up in functions.php what's under wp_footer. how do you know it's injection? |
03-12-2018, 09:21 AM | #3 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Thansk to chime in
After wordfence scan got this message: File Type: Not a core, theme, or plugin file from wordpress.org. Bad URL: http://widgets.amung.us/small.js (XXXXX = theme name ) Like i said not looking to put the developer in a situation where everyone on GFY using the theme will Rush to contact support instead to wait for the patch if the needs File contains suspected malware URL: wp-content/themes/xxxxx/xxxx/footer.php Type: File Issue Found March 9, 2018 5:50 pm Critical "Brian in footer.php there is wp_footer(); function which loads all wordpress plugins its very strange" "the problem is that how this code entered in footer.php? manualy ? who added that this is the problem" <div style="display: none;" class="mdlWrap"> <div class="mdlOverlay"> </div> </div> When the themes Dev wrote me this ^^^ i think this is what it mean because he also said ; this is not part of the theme code Thanks |
03-13-2018, 03:57 AM | #4 |
Industry Role:
Join Date: Mar 2003
Location: San Diego
Posts: 32,054
|
I would block Russia Brian, one of my clients gets injected often from there, once I blocked the whole Country it stopped, but they just use a proxy..
__________________
|
03-13-2018, 06:01 AM | #5 | |
Yo Mamma!
Industry Role:
Join Date: Nov 2002
Location: 🌎🌅🌈🌇
Posts: 19,931
|
Quote:
The other code does nothing by it's self. You have to find javascript/jQuery that reference classes "mdlWrap" and "mdlOverlay" to figure out what it does. If CSS only reference the classes then it's nothing but design tricks. |
|
03-13-2018, 06:39 AM | #6 |
Confirmed Fetishist
Industry Role:
Join Date: Mar 2005
Location: Fetishland
Posts: 11,473
|
so what was it at the end?
|
03-13-2018, 07:01 AM | #7 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
Im getting ready to start my day and will be working on it shortly , Blackmonster have point out something and i will try to find it this morning. Again im a rookie so can take me sometimes . I plan to email the dev with the info i got and trying to resolved this. CAN'T I LOVE my King-servers.com Hosting! Those guys on the support ROCK Thank you All for your input and help. |
|
03-13-2018, 08:51 AM | #8 |
So fucking bland
Industry Role:
Join Date: Jul 2006
Location: England
Posts: 8,004
|
you have a https://whos.amung.us/#widgets widget installed?
__________________
Free traffic and backlinks from one of the fastest growing adult pinsites on the net - SAUCY PICTURES! Easily my best performing webcam sponsor - CLICK HERE!! |
03-13-2018, 09:02 AM | #9 |
Too lazy to set a custom title
Industry Role:
Join Date: Dec 2006
Posts: 16,256
|
always update wordpress, plugins, and anything wordpress related
__________________
I SELL ADULT BACKLINKS! Email: eroticweb>gmail SKYPE: gfybloggerz $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$ |
03-13-2018, 09:09 AM | #10 | ||
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
Quote:
Thanks |
||
03-13-2018, 09:47 AM | #11 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
I think the injector possibly my PC ......
Anyone know Malware clean up for PC other than CC ? Im using that in regular basis already but clearly not enough . I know old news. My buddy laught at me because he is using MAC and don't have those problem he said lol... Here for ya Thanks |
03-13-2018, 11:19 AM | #12 |
So fucking bland
Industry Role:
Join Date: Jul 2006
Location: England
Posts: 8,004
|
Its probably not a wordpress plugin but its hardcoded into the theme.
__________________
Free traffic and backlinks from one of the fastest growing adult pinsites on the net - SAUCY PICTURES! Easily my best performing webcam sponsor - CLICK HERE!! |
03-14-2018, 05:03 AM | #13 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
wp_footer(); loads all your wordpress plugin css or js files bestia theme doesn't have any mallware or virus but you guys sometime drink to much and do not sleep.This theme is installed on more than 4000 websites and has been sold 1300+ times
__________________
adult wordpress themes |
03-14-2018, 05:07 AM | #14 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
__________________
adult wordpress themes |
03-14-2018, 05:13 AM | #15 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
TOTALY NORMAL when you play dumb shit with me.
STOP Blaming my PC, STOP Blaming my server. FIX YOUR SHIT BEFORE SELL IT. Why you sell shit need to be fixed ?? SCAMMER SHIT https://mytubepress.com/store/bestia Guys do not BUY this theme Developer will play you like a dummy after purchase. The theme Let malware getting injected in your website. BUYER BEWARE....... PUSH THE FUCKING REFUND MOTHER FUCKER. |
03-14-2018, 05:20 AM | #16 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
if you dont know what is wp_footer(); please check any footer.php of any other theme and read about it on wordpress.org.
Im not sure about your age but you are doing like a small boy (14 years old) also I dont understand what do you mean with "STOP Blaming my PC, STOP Blaming my server." I'm not a hacker and I've never seen your problem on other customers. However thankyou.
__________________
adult wordpress themes |
03-14-2018, 05:26 AM | #17 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 05:35 AM | #18 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
Im sure you will find the problem in the future, when you understand that its not my problem will be late to say me sorry.
Good Luck!
__________________
adult wordpress themes |
03-14-2018, 05:40 AM | #19 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
Learn to fix your shit before Sell it. SCAMMER sell shit and tell you oh wait for the next release when you discover bugs after installation. ASSHOLE |
|
03-14-2018, 05:46 AM | #20 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
:D you think that I got control of your pc and server with this theme?
Its so funny sometimes I dont know what to do, to laugh or cry.
__________________
adult wordpress themes |
03-14-2018, 05:49 AM | #21 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
I think you should Get a fucking job.. OH no sorry you got one SCAMMING PEOPLE on internet. |
|
03-14-2018, 05:53 AM | #22 | ||
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
SCAMMER SELLING SHIT SCRIPT blaming now on my pc and server.
Quote:
Quote:
Say the guy SELLING SHIT SCRIPT. |
||
03-14-2018, 05:58 AM | #23 | |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
Quote:
Normaly I like to work on my themes and to help my customers but when someone deosn't tell me the problem and starts saying fuck you, mother fucker etc its not so easy. His scanner is wordence and it shows the footer.php thats all but this guy is saying that I got also his computer control. so the footer.php is calling goole plus button which can be disabled in theme panel, footer.php calls also theme scripts like jquery lazyload and other required scripts.
__________________
adult wordpress themes |
|
03-14-2018, 05:59 AM | #24 | ||
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Someone point out something about your Theme
https://gfy.com/webmaster-q-and-fuck...l#post22237227 Quote:
Quote:
NOW you start playing dummy shit , so this is what you get the other me. FUCK YOU NOW |
||
03-14-2018, 06:03 AM | #25 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
hmmm motherfucker?
CHECK THE SPEED! https://gtmetrix.com/reports/xteenshd.com/uKgHU5AL https://developers.google.com/speed/...teenshd.com%2F https://developers.google.com/speed/...com&tab=mobile
__________________
adult wordpress themes |
03-14-2018, 06:09 AM | #26 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 06:13 AM | #27 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
Thankyou Brian, I like your sympathy and I hope its not infectious!
;) Ciao...
__________________
adult wordpress themes |
03-14-2018, 06:17 AM | #28 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 06:18 AM | #29 |
Confirmed Fetishist
Industry Role:
Join Date: Mar 2005
Location: Fetishland
Posts: 11,473
|
very sophisticated behavior, i am sure now the other developers will be happy to work with you
|
03-14-2018, 06:19 AM | #30 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
TAN CENTER Thankyou for your suggestions I will keep in mind.
__________________
adult wordpress themes |
03-14-2018, 06:25 AM | #31 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
I have start this thread in a good way and have really try to work things out. But When i feel the dev just playing dumb shit with me well yeah. Kind of pissing me off. |
|
03-14-2018, 06:35 AM | #32 | |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
You said me that you have 3 sites with bestia and the problem exists only on one website now you are saying that Im a shit? Guy! You are really awesome! I have no words and wont reply any more to your comments.
Quote:
2. wp_footer(); is required on all wordpress themes or it doesnt work without it.https://codex.wordpress.org/Function...ence/wp_footer Please wait your paypal case to finish and sleep some hours you will see that you'll feel better. Thankyou to all other people who replied under this topic. Belive me guys I'm not a hacker and there are no ways to get his pc's control with a theme.
__________________
adult wordpress themes |
|
03-14-2018, 06:51 AM | #33 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 07:57 AM | #34 | |
Confirmed User
Industry Role:
Join Date: Nov 2015
Location: USA
Posts: 180
|
Quote:
You received what is referred to as a false positive on your virus scan which happens often wp_footer() is a wordpress hook which makes theme development easier by adding all of the core essentials with this simple hook, you will find this in any wp site div style="display: none;" class="mdlWrap"> <div class="mdlOverlay"> </div> </div> Believe it or not this is how your theme uses the google plus button , again everything is normal - take a shot of whisky and calm down You can remove this if it makes you feel better, we have removed all google plus info from our themes because adult themes generally do not use google plus and by removing ana scripts associated with this google + button your page score will increase |
|
03-14-2018, 08:06 AM | #35 |
Too lazy to wipe my ass
Industry Role:
Join Date: Aug 2002
Location: A Public Bathroom
Posts: 37,869
|
This not unreasonable at all. I am NOT in support, but I happily handle my own shit on a daily basis.
Being able to handle other peoples would just be a bonus |
03-14-2018, 08:13 AM | #36 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
|
|
03-14-2018, 08:16 AM | #37 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 08:16 AM | #38 | ||
Say for inflation - YES!
Industry Role:
Join Date: Sep 2015
Location: Russia
Posts: 9,855
|
Quote:
Quote:
|
||
03-14-2018, 08:23 AM | #39 |
l8r
Industry Role:
Join Date: Oct 2002
Posts: 13,512
|
|
03-14-2018, 08:27 AM | #40 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 08:31 AM | #41 |
Say for inflation - YES!
Industry Role:
Join Date: Sep 2015
Location: Russia
Posts: 9,855
|
Use this comrad)) in the next time)
https://revisium.com/aibo/ |
03-14-2018, 08:36 AM | #42 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
Appreciated |
|
03-14-2018, 08:40 AM | #43 | |
Yo Mamma!
Industry Role:
Join Date: Nov 2002
Location: 🌎🌅🌈🌇
Posts: 19,931
|
Quote:
|
|
03-14-2018, 08:41 AM | #44 |
Confirmed User
Industry Role:
Join Date: Nov 2015
Location: USA
Posts: 180
|
Brian I updated my response, I just went in an looked it's the overlay for the google + button, and you can remove this without harm - I actually have previously removed a few files with the google + button info
|
03-14-2018, 08:50 AM | #45 |
Confirmed User
Industry Role:
Join Date: Oct 2014
Posts: 8,868
|
While not spending much time looking/thinking at this since I have enough management problems of my own, I would say...
If you are looking at the php output and looking for the source of bad html output, look also at the theme and plug-ins. They can overlay anything anywhere since it is all php. There are sftp programs that will let you look inside of all files for matching strings of code automated. Makes it easier but does take time. Better than by hand/eyeball. If you determine you have been hacked, I would say stop doing things in a/the standard way. Your making it to easy. |
03-14-2018, 08:51 AM | #46 |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
|
03-14-2018, 08:57 AM | #47 | ||
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
Quote:
Oh yeah i know now STOP buying and trying new Theme Easy fix lol |
||
03-14-2018, 09:35 AM | #48 | |
l8r
Industry Role:
Join Date: Oct 2002
Posts: 13,512
|
Quote:
If you do not need uploads then the uploads folder should not be 777, same with cache folders and other commonly "left wide open" folders. There should be no plugins installed or present in the plugins folder that are not being used. Same with themes, if you are not using the theme remove it from the server. Wordpress is a security mess in my opinion. . |
|
03-14-2018, 09:36 AM | #49 |
Registered User
Industry Role:
Join Date: Aug 2014
Location: Italy
Posts: 49
|
Don't forget to remove wp_footer(); from NEW THEME's footer.php
__________________
adult wordpress themes |
03-14-2018, 09:44 AM | #50 | |
STAND OUR GROUND
Industry Role:
Join Date: Oct 2014
Location: Canada
Posts: 7,090
|
Quote:
https://gfy.com/22237207-post17.html reread your reply before post any reply. Your the dev and not me You should know What that code is DUH. |
|