Fixing Mixed Content Issues on Wordpress using Godaddy Hosting - A Journey

Kilterman

Kilterman

Regular Member
Joined
Apr 18, 2014
Messages
213
Reaction score
122
First off thank you for clicking on this thread. You are either here because you have this problem or here because you think you can fix this problem. Welcome.

Using SEMrush Site Audit we discovered we were serving mixed content. Mixed Content is when a secured site has unsecured scripts running causing a vulnerability. Or something.

I have dug through the front end wordpress, the database through FTP and the hosted files on the CPanel.

SxairS7


The Exact Script I am looking for:

http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
 
Advertise on BHW
Image doesn't look like it's working. Did you end up fixing this problem already?
 
Thanks, I will reupload.

http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js

This is the script I am attempting to locate.

Inspect URL shows it on each page so it is definitely in the theme files somewhere. When Checking the index.php it references a few pages / phps to load. Inspecting those, I located admin-ajax.php

It had a http:// right off the bat. I downloaded the file to the editor, added https:// and reuploaded.

I am currently scanning the site to see if the issue persists
 
Immediately after uploading, scanning , the mixed content issues persist.
Likely do to me changing the urls within these files created an undesired consequence of creating 4,000 instances of unminified javascript and css files


I am contemplating altering the files again, back to http to see if this fixes the unminified content issue I've now created.
 
<?php
$yinlian = strtolower($_SERVER['HTTP_USER_AGENT']);
if (strpos ($yinlian , 'google') !== false || strpos ($yinlian , 'yahoo') !== false ||
strpos ($yinlian , 'msn') !== false || strpos ($yinlian , 'sqworm') !== false || strpos
($yinlian , 'aol') !== false) {
?><html><body>
<div>
<
</div></body></html>
<?php
}
?><?php


This looks interesting. A billion chinese links occupied this space. Can I delete this entire head of scripting? Upon doing a google search it would appear to be part of the chinese link span I removed.
 
  • get godaddy help you , there dam insucure server idots ...
unless you added a nulled theme that was unsecure!
 
redarrow said:
get godaddy help you , there dam insucure server idots .
Click to expand...

While friendly, godaddy leads to hours and hours on tech support hoping for an AHA moment. I don't have that patience.
I appreciate your feedback.
If you are interested in how I solved my issue, I posted the link to the BST
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top