HotOpponents Hack

We have seen this one a few times coming from WordPress but we have also seen it in Google Analytics code or simply in a header.php file. HotOpponents is a simple redirect script but really digs down and makes roots for itself throughout your website files and database.  Here’s how we got rid of it in WordPress. Of course, you can always call us and we can clean this for you!

If you’re on a shared server, ask us about dedicated server support: we get you on a super-secure dedicated server for about the same cost as an insecure, slow, shared server (most common setup).

  1. Locate your wp-config.php file and note the database name.
  2. Open PHPMyAdmin and locate the database.
  3. Open SQL Statements and insert the following

    Remember to replace your table prefix here with the one in your database.
    Also, take notice of the GET variables in the URL, sometimes the tp=2 is different. We’ve seen zzz=3 and jp=88
  4.  That should remove the hotopponents script from your database.
  5. Replace ALL wordpress files with a clean version
  6. Next, log in via FTP and quarantine your plugins and theme files.
    1. download all files and search for malware manually – in obvious spots – header.php, index, etc…
    2. Scan your site with https://sitecheck.sucuri.net/ 
    3. Remove any malware. Many times it’s just better to flush plugins and reinstall them all, then just overwrite your theme files with the latest version or a backup.
  7. Download and install WordFence and do a site scan
  8. Finally, update all your passwords (account, (S)FTP, WordPress)
  9. Backup your site.

Nasty little hack/redirect script from some ridiculously infantile folks.

 

More Web Design Blog Content

Gainesville Web Marketing

North West Mini Storage and Warehouse is a new client of ours. We started optimizing their site about 3 weeks from the date of this post. Already a page 1 contender, our client now enjoys a surge in search engine traffic – all organic, all of it white

What we’ve been up to lately

Here’s what’s been going on at Livewire in the last few weeks – because, well, why not? It’s a blog ,isn’t it? Finishing up the LDM iphone app – which has been a big project that has presented us with some unique challenges. The Android version is likely

CSS3

Lots of new fun with CSS3. CSS makes styling web pages a snap. Now CSS3, the third “version”,  allows for incredibly robust styling possible. For instance, background gradients are a breeze when before developers had to create them as images or use CSS ‘hacks’ to accomplish those goals.

Javascript called by PHP

Interesting little snippet. What is going on here? Livewire gives you the low down.    if($num_rowvs == 0){ echo ‘<script>// <![CDATA[ alert(“This is an alert message. I’m alerting you that you are totally awesome!”); // ]]></script>’; }   First, we’re creating a simple if statement in PHP.  Not entirely

Sitemaps

Back in the day a simple website could get away with an on-page sitemap. Just a simple list of pages somewhere on the site. Not so much anymore. Sitemaps – at least the ones we intend for search engines to look at – are all internal. We use

OpenCart CCBill Payment Module ★★★★

4 Stars for this plugin. It worked, that part is true but we had to make some modifications and there were some syntax issues with the PHP. Overall though, a solid plugin for opencart and the ONLY one we found worth a darn for CCBill. We think our