[Cialug] an easier way?

jim kraai jimgkraai at gmail.com
Wed Apr 22 14:35:41 UTC 2020


? what's wrong w/
1. grep -rl "redirect pattern" > remove_redir.sh
2. edit remove_redir.sh to
3. prepend each line with sed -i '$d'
4. make  remove_redir.sh executable
5. execute it



On Wed, Apr 22, 2020 at 9:28 AM Scott Yates <Scott at yatesframe.com> wrote:

> If you have direct access to the database, you may be able to whip up a SQL
> script.
>
> On Wed, Apr 22, 2020 at 9:23 AM <chris at bynw.com> wrote:
>
> > wordfence isnt available that i saw anyway. i can double check to see.
> > but all the php files were nuked and re-uploaded from fresh copies. it's
> > in the sql file of the database dump. the redirect script that is on
> > every post. over 700 instances of it. thus the need for an easier way of
> > removing it. manually editing 700 posts is time consuming.
> >
> >
> >
> > On 2020-04-22 09:14, L. V. Lammert wrote:
> > > On Wed, 22 Apr 2020, chris wrote:
> > >
> > >> wiped out all the plugins to be safe. but the redirect script was and
> > >> still is on every post.
> > >>
> > > 2nd possibility is in the theme itself, .. update/reinstall.
> > >
> > > You can also grep all files for base64 encoding, .. that's a popular
> > > way
> > > to obfuscate malicious code.
> > >
> > > Or, does your hosting provider have WordFence available?
> > >
> > >       Lee
> > > _______________________________________________
> > > Cialug mailing list
> > > Cialug at cialug.org
> > > https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
> > _______________________________________________
> > Cialug mailing list
> > Cialug at cialug.org
> > https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
> >
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
>


More information about the Cialug mailing list