Viewing 16 posts - 1 through 16 (of 16 total)
  • Author
    Posts
  • #740564

    Wordfence alerts me this:

    Wordfence Screenshot

    It seems that a bad link is found in that file, opening the file the link is in a commented row.
    It should not have been edited since i installed the theme, can someone helps me to understand if it is normal?

    Thank you

    #740569

    I have exactly the same message from Wordfence on one of my enfold sites this morning.
    I assume it is a false positive but would like to get feedback from the Enfold support team as soon as possible. I have run the site through sucuri’s external site check scan and it comes back clean.

    The site is: http://stewkley.org.uk

    Waiting to hear ?

    #740572

    the same here :( Must i do anything ?

    #740575

    I’m having the same issue on multiple websites.
    What am I to do?

    #740576

    As I mentioned in another topic about this problem:

    Same problem. Seems like the link they use got hacked. The link (http://www.link.at/) DON’T VISIT ATM is mentioned as a comment.

    //fallback for previous default input link elements: convert a http://www.link.at value to a manually entry
    if(strpos($element[‘std’], ‘http://’) === 0) $element[‘std’] = ‘manually,’.$element[‘std’];

    Nothing to worry about as long as you don’t visit the website. Most browsers will block the site anyways.

    #740580

    Any response or comment from author?

    #740583

    It can be a concern as Google can blacklist your site if it finds the link when crawling to index etc.

    #740603

    Same issue here too.

    #740608

    Hey!

    Please go to enfold/config-templatebuilder/avia-template-builder/php/html-helper.class.php file and find

    
    //fallback for previous default input link elements: convert a http://www.link.at value to a manually entry

    and change it to

    
    //fallback for previous default input link elements: convert a http://kriesi.at value to a manually entry

    We have informed our devs :)

    Edit: We will add the changes in upcoming Enfold update. Link is in commented line therefore it has no affect whatsoever however applying these changes will take care of Wordfence alert

    Regards,
    Yigit

    • This reply was modified 2 years, 8 months ago by  Yigit.
    #740609

    I have temporarily substituted the bad URL for a good one in the html-helper.class.php file.
    Re-scanned with WORDFENCE – no problem.
    Not saying this is a 100% solution, but it will stop any poss blacklisting for now!

    #740611

    Hey!

    We will update the file in upcoming Enfold version. Link is in commented line therefore has no affect but still changing it should get rid of the alert :)
    We would appreciate it if you could please test it and confirm :)

    Regards,
    Yigit

    #740617

    Yep, replacing that link results in a clear Wordfence scan. Thank you Yigit

    By the way, for anyone else looking for it it is located at line 726 in the file.

    Hugues

    #740619

    Hi,

    Great! Thanks for confirming and glad it worked for you! :)

    We will keep the thread open and will wait to hear from the creator of this thread. If you have any other questions or issues, please feel free to start a new thread.

    Best regards,
    Yigit

    #740620

    done, thank you.

    #740621

    All clear here :-)

    #740625

    Hi,

    Glad it worked! I am marking this thread as resolved for now. We will include the fix in upcoming update.
    Let us know if you have any other questions or issues!

    Best regards,
    Yigit

Viewing 16 posts - 1 through 16 (of 16 total)

The topic ‘Wordfence found a suspected malware in an Enfold .php file’ is closed to new replies.