Solved

WordPress forwarding/linking strange content

Posted on 2013-11-04
3
237 Views
Last Modified: 2013-12-01
********** BACK STORY **********

Client calls and says they have a strange description of their site on google.

Sure enough, they're right. They whole description is about adobe software.

So, I started searching the content. To the point that i downloaded the entire public directory & pulled a sql dump. from linux cl, used both find & grep in attempts to find any word pattern.

adobe, best, price, etc.

I'm intentionally misspelling the domain name so this questions doesn't come up in google if its searched.
replace the numbers for vowels.

d3nt@lfixrx.c0m

********** HERES THE ACTUAL QUESTION **********

If from the home page, you click on the Home button (sometimes times the second click) - you will be sent to this adobe page. The url still says the correct domain name. Looking at the error console & network request - I can see that the requests are going to wp.com

I can't find the link in any css or js files. The <a href link is also correct.

Where could this problem lie ?? Please help experts.
To be clear, my question is about the Home button forwarding to the wrong site / pulling content from invalid site. What is the cause of this home button going to the wrong home page ?

Thanks in advance experts.
-steve
0
Comment
Question by:Imaginx
3 Comments
 
LVL 70

Accepted Solution

by:
Jason C. Levine earned 500 total points
ID: 39623349
The site has been hacked and there is code injected into one of the PHP files (probably a core file) that is causing the problem.  

Try following some of the basic steps in this article:

http://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html

But in all likelihood you will need a service such as Sucuri or StopTheHacker to step in and analyze the site for back doors and insecurities.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article discusses four methods for overlaying images in a container on a web page
This article discusses how to create an extensible mechanism for linked drop downs.
The purpose of this video is to demonstrate how to manually back up a WordPress Database. This will be demonstrated using a Windows 8 PC. The Host used will be IPage.com Log into your Hosting account. IPage will be used for demonstration : Locat…
The viewer will learn the benefit of using external CSS files and the relationship between class and ID selectors. Create your external css file by saving it as style.css then set up your style tags: (CODE) Reference the nav tag and set your prop…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now