Have Strange text at top of page

[Jim FelderParticipant Post count: 10]

I have not managed this site in a while. Other members have access and may have done something incorrectly. I am having trouble locating this code in the site.

This text shows at top, above menu:

echo ” “;

http://www.fhcc.org

[RichardParticipant Post count: 182]

Not sure if this is helpful, but this is in the Code using Firebub. Perhaps there’s a line in your custom CSS?

<div id=”cboxOverlay” style=”display: none;”></div>
<div id=”colorbox” class=”” style=”padding-bottom: 20px; padding-right: 0px; display: none;”>
<div id=”cboxWrapper”>
<div style=”position:absolute; width:9999px; visibility:hidden; display:none”></div>
</div>
echo ”
<script language=”\”javascript\”” type=”\”text/javascript\””>
“;

[Jim FelderParticipant Post count: 10]

Thank you Fionavar for the response.

I have searched for that code but don’t see it in the CSS. I was using a child theme for this but I think someone has activated the original. When I activate the child, that echo ” “, code at the top of the page.

Here is the code inside my Child CSS:

/*
Theme Name: MU – Child
Description: child theme of MU
Author: jimfelder
Template: LivingOS_MU

(optional values you can add: Theme URI, Author URI, Version)
*/

@import url(“../LivingOS_MU/style.css”);

[RichardParticipant Post count: 182]

Hi Jim,

To confirm – the ‘echo’ text only appears when the Child Theme is enabled, but not with the regular Theme?

Richard

[Jim FelderParticipant Post count: 10]

Shows on both.

it’s showing currently.

When I turn on the Child theme, the site is not showing the theme at all. Just the links, and text, etc. Someone at the church said he got a virus on his PC when he went to the site. I’m trying to find a good plugin to install to check the site.

[RichardParticipant Post count: 182]

Hi Jeff,

have you done anything to your functions.php or style.css in the Child theme directory? If it is happening in both the theme and the child one, then perhaps something has changed in the parent? Is your theme up to date? As well, have you tried disabling plugins to see if – perhaps there is a conflict?

Richard

[Jim FelderParticipant Post count: 10]

I need to update MU theme but since the child is not active and the parent is, I’m afraid I’ll lose my customizations. I had not added anything to the child CSS but can’t remember what I’ve done elsewhere.

As for the plugins, I’ll deactivate them and try that. Thanks.

[Jim FelderParticipant Post count: 10]

OK, deactivated all plugins and it was still there.

I’ve narrowed it down to the MU theme. The child I have no longer works. I added Twenty Twelve Theme and that tiny code at the top is not there. So there’s something in one of the files in the MU folder.

[Jim FelderParticipant Post count: 10]

I found this code in several index.html files from some pages. Not sure where I would find this in the code. What file can I find this in?

This was in one line:

</style><script type=”text/javascript”>var src=”http://www.fhcc.org/wp-admin/admin-ajax.php?action=wordfence_logHuman&hid=77C8C3DD06DA6E1DFC0FE1D040633F35″; if(window.location.protocol == “https:”){ src = src.replace(“http:”, “https:”); } var wfHTImg = new Image(); wfHTImg.src=src;</script>echo ” <script type=\”text/javascript\” language=\”javascript\” > you need to pay for this crypt</script>
“;

[RichardParticipant Post count: 182]

That does not look like a MU script – though I admit this may be beyond me at this point. If you are using a child theme and have the text for the custom CSS saved, I think you should be able to – if all is lost – simply copy & paste after the update. Are you using a secure session on your site? The https would seem to indicate something along those lines. Are you using the WP plugin WordFence? http://wordpress.org/extend/plugins/wordfence/ As the Ajax you have posted seems to indicate this is the case?

[themeweaverKeymaster Post count: 730]

WordFence is a security plugin as Fionavar suggests. Disable it to see if issue is cause by this plugin and then contact the plugin developer to resolve.

[Jim FelderParticipant Post count: 10]

I have since changed themes. I had installed the Wordfence plugin after seeing this to prevent further problems. So it wasn’t the plugin.

Thank You

[RichardParticipant Post count: 182]

You changed to a different theme other than Mu Jim? It could have been an issue between the plug-in and the theme.

[Jim FelderParticipant Post count: 10]

No, the problem was there before I installed that plugin.

[RichardParticipant Post count: 182]

Ah – so are you still running Mu as a theme?

[Author]

Posts