IT expert required to locate spam links in Wordpress database
Budget: $30 – $250 AUD
My website has been hacked and spam URL entries / redirects have been created. I require an IT expert to locate where the entries are.
*** This is not a project to remove the entries, yet. I only require them to be located at this stage ***
Already, we have done the following - and been unable to locate the entries:
- Forensic checks in cPanel of files & redirects
- Analysis of database tables via phpMyAdmin
- Search of entire root OS file system for mentions of one of the /redirects
- Scan of Wordpress installation using Wordfence – 47 file detections appear to be false positives
- Wordpress installation was only 1 month out of date; nonetheless upgraded to 5.8.2
- Deep dive into site theme (Stockholm) and updating of Twenty Twenty-One
Analysis:
Observed behaviour is a 307 redirect however no mention of the redirect links can be found. It is suspected the links must exist in the database, as a full text string search of the file system only found mentions of the spam links within the /tmp/cache directories for cPanel.
Please only bid on this job if you are confident in being able to locate the entries.
Several examples of the entries below, and I can provide a full list once job is accepted:
https://lisahatz.com.au/creative-writing-techniques-gcse-english/
https://lisahatz.com.au/cv-writing-service-northern-ireland/
https://lisahatz.com.au/ontario-public-service-writing-a-cover-letter-and-resume/
https://lisahatz.com.au/need-someone-to-write-a-business-plan-for-me/
*** This is not a project to remove the entries, yet. I only require them to be located at this stage ***
Already, we have done the following - and been unable to locate the entries:
- Forensic checks in cPanel of files & redirects
- Analysis of database tables via phpMyAdmin
- Search of entire root OS file system for mentions of one of the /redirects
- Scan of Wordpress installation using Wordfence – 47 file detections appear to be false positives
- Wordpress installation was only 1 month out of date; nonetheless upgraded to 5.8.2
- Deep dive into site theme (Stockholm) and updating of Twenty Twenty-One
Analysis:
Observed behaviour is a 307 redirect however no mention of the redirect links can be found. It is suspected the links must exist in the database, as a full text string search of the file system only found mentions of the spam links within the /tmp/cache directories for cPanel.
Please only bid on this job if you are confident in being able to locate the entries.
Several examples of the entries below, and I can provide a full list once job is accepted:
https://lisahatz.com.au/creative-writing-techniques-gcse-english/
https://lisahatz.com.au/cv-writing-service-northern-ireland/
https://lisahatz.com.au/ontario-public-service-writing-a-cover-letter-and-resume/
https://lisahatz.com.au/need-someone-to-write-a-business-plan-for-me/