Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • March 25, 2014 at 3:20 pm #242758
    mdlhale

    Hi,

    I have a multi-site installation with roughly 20 sub-sites and recently i’ve been having some issues with spam hacks (routing blog posts to some casino site, etc), and this is only happening on the sub-site I have the enfold installed. Is there anything I can do or check?

    The SQL that seems to be getting injected is on the site with the Enfold theme installed under a table called (Client_Data_Run) – I’ve deleted this entry, but the next day it returned. If you could maybe help point me in the right direction that this could be happen (any files within) please let me know!

    Thank you so much.

    -M

    March 25, 2014 at 3:24 pm #242762
    mdlhale

    I also ran a scanner, and I seem to get an alert from the file /themes/enfold/framework/php//function-set-avia-ajax.php
    which might make since since they are using a slug by redirecting certain parts of the pages within that theme to spam/ad. Anything I can do to this file? Thanks

    March 26, 2014 at 10:06 am #243232
    Dude

    Hi!

    I’ll mark this thread for Kriesi. Personally I’m not aware of a code vulnerability but maybe he can find something.

    Best regards,
    Peter

    March 26, 2014 at 11:40 am #243281
    Kriesi

    Hi!

    I am also not aware of any problems. To my knowledge there are no reports about any issues and an expert also checked our themes some time ago against any hacks.

    Which scanner are you using and what exactly does it say about the file? The critical functions within that file are all secured with wordpress “check_ajax_referer” function so only logged in users with access to the backend, a valid wordpress session and a nonce-key for the function to execute can use them…

    Best regards,
    Kriesi

  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)
  • The topic ‘Theme is being compromised?’ is closed to new replies.