[Cialug] an easier way?

[chris at bynw.com]

This is the redirect script.

https://pastebin.com/fDr82uak

I dont know if grep would like that whole bit of thing in it's search. 
And I dont know enough about sed since I haven't used it directly for 
anything to effectively write the script to remove that code


On 2020-04-22 09:39, Scott Yates wrote:
> Either way you will need to figure out what specifically is causing the
> redirect.  Once you know the bit that is doing it, you can clear it 
> out.
> 
> 
> On Wed, Apr 22, 2020 at 9:36 AM jim kraai <jimgkraai at gmail.com> wrote:
> 
>> ? what's wrong w/
>> 1. grep -rl "redirect pattern" > remove_redir.sh
>> 2. edit remove_redir.sh to
>> 3. prepend each line with sed -i '$d'
>> 4. make  remove_redir.sh executable
>> 5. execute it
>> 
>> 
>> 
>> On Wed, Apr 22, 2020 at 9:28 AM Scott Yates <Scott at yatesframe.com> 
>> wrote:
>> 
>> > If you have direct access to the database, you may be able to whip up a
>> SQL
>> > script.
>> >
>> > On Wed, Apr 22, 2020 at 9:23 AM <chris at bynw.com> wrote:
>> >
>> > > wordfence isnt available that i saw anyway. i can double check to see.
>> > > but all the php files were nuked and re-uploaded from fresh copies.
>> it's
>> > > in the sql file of the database dump. the redirect script that is on
>> > > every post. over 700 instances of it. thus the need for an easier way
>> of
>> > > removing it. manually editing 700 posts is time consuming.
>> > >
>> > >
>> > >
>> > > On 2020-04-22 09:14, L. V. Lammert wrote:
>> > > > On Wed, 22 Apr 2020, chris wrote:
>> > > >
>> > > >> wiped out all the plugins to be safe. but the redirect script was
>> and
>> > > >> still is on every post.
>> > > >>
>> > > > 2nd possibility is in the theme itself, .. update/reinstall.
>> > > >
>> > > > You can also grep all files for base64 encoding, .. that's a popular
>> > > > way
>> > > > to obfuscate malicious code.
>> > > >
>> > > > Or, does your hosting provider have WordFence available?
>> > > >
>> > > >       Lee
>> > > > _______________________________________________
>> > > > Cialug mailing list
>> > > > Cialug at cialug.org
>> > > > https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
>> > > _______________________________________________
>> > > Cialug mailing list
>> > > Cialug at cialug.org
>> > > https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
>> > >
>> > _______________________________________________
>> > Cialug mailing list
>> > Cialug at cialug.org
>> > https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
>> >
>> _______________________________________________
>> Cialug mailing list
>> Cialug at cialug.org
>> https://www.cialug.org/cgi-bin/mailman/listinfo/cialug
>> 
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> https://www.cialug.org/cgi-bin/mailman/listinfo/cialug