Custom message hacked

[Masa Hasegawa]

Hello. Thank you for the plugin. This morning I discovered that when I visit a protected page and I click on a link on my custom message I am redirected to a phishing site. Please advise on what I can do. Here is the page <a href="http://englishmasa.com/student/">student page</a>

Regards,
Masa

[mbrsolution]

Hi, your best option is to scan your site internally for any spam links. Check the plugins you currently have running. Does your site have any security plugins installed?

Thank you

[The Assurer]

Here is a recommended security plugin:
https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

[Masa Hasegawa]

No, I hadn’t. Which upon reflection seems stupid. Thank you for the advice, I will install and report back if anything was amiss with simple membership plugin.

[Masa Hasegawa]

Hello again. I have installed some security plugins but nothing flags up any links. In my simple membership custom message page on my wordpress dashboard, I have set a custom message for people trying to view restricted content. I don’t understand where this “page” is. This text and two links (one to my login page, one to my signup page) are showing on my site but when I click on the link to my signup page it takes me to this page https://www.accsrectraining.com/wp-login.php

Where can I find the file that is responsible for custom messages because I am assuming that that file has been corrupted.

Thanks in advance for any help.

[mbrsolution]

Hi I clicked on the link you shared above and it took me to your website login page.

Are you sure your laptop or computer is hasn’t got a virus. Also clear your browser cache as well and then try again.

Let me know what happens.

Regards

[Masa Hasegawa]

Sorry. I didn’t explain properly. In the link I shared above you have to click on one of the two links on that page and then it takes you to the afore mentioned accrestraining page. The links are in Japanese they say ログイン and 新規登録. Sorry if I am making this difficult!
Regards,
Masa

[mbrsolution]

Hi, if I understand correctly and I think I have. I carried out the following as per your instructions.

I clicked on the URL link you shared above and then clicked on the login link. It displayed a message saying that the page is not secured. So I went ahead and accepted the none secured page in the browser and it took me to the login page with out any other messages. (No spam link detected)

So I can confirm that apart from the insecure message displayed by the browser the login link works correctly.

I also tested the registration link. This link took me to a page displaying the following message Oops! That page can’t be found. (No spam links either)

I am not seeing any spam links any where.

However you do need to check your security SSL certificate settings. There is something not secured in your site. Apart from this everything else feels okay to me.

Let me know if you need more information or help.

Kind regards

[Masa Hasegawa]

Thank you for taking the time to check. I don’t really know how to describe this but I get the same results in a different way. If I click on the registration page, I get an Oops page but it is for the accrestraining page I mentioned before. The login link takes me to a wordpress login page but but it is for accrestraining not my site. I tried on my Iphone, I on my wife’s Iphone and I got exactly the same result.

[Masa Hasegawa]

Sorry, me again. How do I check my SSL security settings?
Kind regards,
Masa

[Masa Hasegawa]

OK. I just figured it out. On my custom message setting page, I had a custom message in Japanese. The link that I typed in was https://... when I changed this to http://... everything worked out fine. The trouble is, I am assuming https is supposed to be the secure version. What might this mean? I don’t know if this is the place I should be asking this.

[mbrsolution]

Hi, I am happy to see that you finally worked out why this issues was happening in your site.

In regards to your SSL issue. If you have SSL setup for your site then I recommend that you speak to your host about this issue.

You might also like to try the following plugin https-redirection which can also help you with your SSL issue. But remember only use this plugin if your SSL certificate is set up correctly in your server.

If you don’t have SSL setup for your site then https:// should not be used for your links or URLs in your site.

Kind regards

[Masa Hasegawa]

Thank you! I am glad everything was sorted out too!!!!
Thanks for a terrific plugin too!

[mbrsolution]

You are most welcome 🙂

I am marking this support thread as resolved.

Enjoy the plugin 🙂

[Author]

Posts