Link hijack

[robsonfinancial]

Help! We’ve got random link redirects. I’ve changed the admin password but I don’t know how to trace the malicious code.

[ruenel]

Hey There,

Thanks for posting in! ​To assist you better with this issue, would you mind providing us the url of your site with login credentials so we can take a closer look?

To do this, you can create a secure note with the following info:
– Link to your site
– WordPress Admin username / password
​
Thank you.

[christopher]

Hi there,

I checked the website and could not find anything that I can suggest to help you out. As you may know, we are the Theme developers and are not experts regarding the security matters.

The thing that I found is that you added the Facebook Pixel Code to X > Launch > Options > JS which is wrong. You can not have <script> tag there. If you want to add such a code to the HTML Head section of the website you need to install a Child Theme and add the code to the functions.php file as below:

add_action('wp_head', 'head_information', 9999);

function head_information () { ?>
<!-- Facebook Pixel Code -->
<script>
!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;
n.push=n;n.loaded=!0;n.version='2.0';n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,
document,'script','https://connect.facebook.net/en_US/fbevents.js');
fbq('init', '1401638686517530');
fbq('track', 'PageView');
</script>
<noscript><img height="1" width="1" style="display:none"
src="https://www.facebook.com/tr?id=1401638686517530&ev=PageView&noscript=1"
/></noscript>
<!-- DO NOT MODIFY -->
<!-- End Facebook Pixel Code -->
<?php }

For more information: https://theme.co/apex/forum/t/customizations-actions-and-filters-in-x/208

Thank you.

[christopher]

Hi there,

I still see the problem of adding HTML code to X > Launch > Options > JS. Please double check the way I suggest and follow through.

Thank you.