751 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 5-6 years
  • Referred between 1 and 9 users
  • United States
CyberShot says

I was working on a site for a customer yesterday and I couldn’t get the WordPress uploader to work. I did some googling and decided to open firebug and check the errors console. When I tried using the uploader, an error popped up showing a div with some html markup and it looked like a bunch of advertisements for drugs and other stuff. So I replaced the whole admin folder thinking that would fix it but it didn’t. So I dumped the database and reinstalled WordPress and that didn’t even fix it. Have you heard of such an issue? is it possible there is an infection in the web server that is causing this? I was shocked to find out that dumping the database didn’t work. I even tried other themes and got the same issue so I know it isn’t the theme my customer was using. Any ideas?

87 posts Be different!
  • Elite Author
  • Sold between 250 000 and 1 000 000 dollars
  • Referred between 500 and 999 users
  • Exclusive Author
  • Has been a member for 3-4 years
  • Bought between 10 and 49 items
UnitedThemes says

Hi,

we had something similar a few weeks ago. One of our customers was complaining that our theme does not work and hijacked his server with damage to the database. In the end we found a code snippet inside the functions.php which was able to reproduce itself to every functions.php inside the theme folder. So whenever the user changed a theme or installed a new one, the code copied itself into each functions.php on the server. The initial reason where this code came from is still undiscovered but can has several reasons.

So this error still appears on a complete naked WordPress installation with a standard WordPress theme?

751 posts
  • Bought between 10 and 49 items
  • Exclusive Author
  • Has been a member for 5-6 years
  • Referred between 1 and 9 users
  • United States
CyberShot says

I didn’t check the functions.php file. I will look again tonight

1 post
  • Greece
  • Has been a member for 3-4 years
  • Sold between 100 and 1 000 dollars
fractalgr says

Hi,

Try it also with no plugins installed.

by
by
by
by
by
by