Get Off Those Maliciously Loaded Scripts!
Download this free Anti-Malware Plugin for WordPress.

If anyone can help me with this I would appreciate it.

I ran this on my dedicated server and only came back with one threat (unlike the 338 on my shared server), which is on a godaddy plug in.

The code is as follows:

<?php

/**

* Copyright 2013 Go Daddy Operating Company, LLC. All Rights Reserved.

*/

// Make sure it’s wordpress

if ( !defined( ‘ABSPATH’ ) )

die( ‘Forbidden’ );

/**

* Class GD_System_Plugin_404

* Stop infinite 404 loops

* @version 1.0

* @author Kurt Payne <kpayne@godaddy.com>

*/

class GD_System_Plugin_404 {

/**

* Constructor

*/

public function __construct() {

add_action( ‘wp’, array( $this, ‘stop_infinite_404_loops’ ) );

}

/**

* Some plugins / themes fetch local resources over http.  When the resources aren’t there,

* WordPress returns a 404 page, which causes the theme / plugin to fire again and try to

* fetch the same missing resource and creates an infinite 404 loop.  This intercedes and

* stops that behavior.  Pages that end with .htm and .html will still render correctly.

* @return void

*/

public function stop_infinite_404_loops() {

global $wp_query;

if ( is_404() && isset( $wp_query->query['pagename'] ) && preg_match( ‘/^[^?&=]+\.(css|gif|jpeg|jpg|js|png)(\?|&)?(.*)?$/i’, $wp_query->query['pagename'] ) ) {

status_header( 404 );

switch ( strtolower( pathinfo( $wp_query->query['pagename'], PATHINFO_EXTENSION ) ) ) {

case ‘gif’ :

gd_system_header( ‘Content-type: image/gif’ );

include( GD_SYSTEM_PLUGIN_DIR . ‘/images/404.gif’ );

break;

case ‘jpg’ :

case ‘jpeg’ :

gd_system_header( ‘Content-type: image/jpeg’ );

include( GD_SYSTEM_PLUGIN_DIR . ‘/images/404.jpg’ );

break;

case ‘png’ :

gd_system_header( ‘Content-type: image/png’ );

include( GD_SYSTEM_PLUGIN_DIR . ‘/images/404.png’ );

break;

case ‘css’ :

gd_system_header( ‘Content-type: text/css’ );

echo “\n”;

break;

case ‘js’ :

gd_system_header( ‘Content-type: application/javascript’ );

echo “\n”;

break;

}

add_filter( ‘wp_die_handler’, ‘gd_system_die_handler’, 10, 1 );

wp_die();

}

}

}
The code it does not like is:  include( GD_SYSTEM_PLUGIN_DIR . ‘/images/404.gif’ );

I also noticed on webmasters google is redirecting my site back to http, when in fact it is https.
If I am not mistaken webmasters had a spot to tell google how to read your domain. www. or no www. if I go to it with www. the https shows up.
on chrome, it stays www. and until you hit a page it does not show https. firefix it goes straight to https no matter what.

so should I fix it with the repair button?

Just wanted to say THANK YOU! I ran your plug in behind sucuri and WOW!

My question is , I know this is for wordpress, and I have about 10 sites all on one godaddy shared server. I ran your plugin on my main wordpress and I see it is running all my files how sweet is that? I do not even mind one bit for donating twice and will be a continuing to give for the years to come.

My question is will it work on a file that is not wordpress? one of my sites is a Xenforo forum, that also does run on plug ins ( Hint you might want market to them if it works).

So can I delete or automatically fix the other files from xenforo? or is this going to cause a problem.

I do have back ups for the forum , but it takes all day to back it up and 4 hours to reinstall. Really big file. So far it has found approx 250 threats scanning my sites and at 82% at 175 minutes. VERY Impressive!

Thanks again,

Rod Harper