Search code examples
wordpresssuperfish

is my code messed up or is someone trying to hack site

Im looking over the forms, if someone already spoke on this topic please share link. I keep getting messages saying users tried to access a non-existant page. Here is picture: http://screencast.com/t/gMmW7IahI3m

Im trying to see if i messed up somewhere with my super-fish script or if its a hacker trying to access the script for some vulnerability. I've come across people online saying there is a hack but i think it is something on my end. Just having a hard time finding any answers online.

Solution

  • Here is my conjecture.

    If you visit this page (the one from your logs):

    http://www.peakworthy.com/randomly-awesome-moments-caught-by-ameteur-photographers/23/

    And keep an eye on the network tab of your browser tools, you'll see that the page does in fact make a request to:

    http://www.peakworthy.com/wp-content/themes/my-simone/js/superfish-settings.js?ver=6a68914e282a033f4f06420fddc1e005

    The main superfish.js file is found in this directory, so I'm guessing the settings file is missing and needs to be added.

    http://www.peakworthy.com/wp-content/themes/my-simone/js/

    So in summary, nothing malicious... just a problem with your theme missing a file.