user3255145
user3255145

Reputation: 33

Odd script being sourced, no idea where from

While troubleshooting my site I have ran into this error.

"This page is trying to load scripts from unauthenticated sources"

I am slowly learning to head to the Google developer console, which I found...

(program):1 Mixed Content: The page at 'https://www.thepixelfoundry.net/main/' was loaded over HTTPS, but requested an insecure script 'http://api.sitestate.ru/scripts/stat/sitestate.js?r29'. This request has been blocked; the content must be served over HTTPS.

This is my first Wordpress theme, as I built this page in order to better learn Wordpress. I have no idea what i sourcing that script.

I have checked my:

when I googled the scripts domain as the .ru already raised a red flag I received a warning from google questioning my computers recent traffic.

now im terrified....

How can I find this script? I have also installed Sucuri on the Wordpress side...and everything seems clean with a scan.

Upvotes: 1

Views: 154

Answers (2)

John Priestakos
John Priestakos

Reputation: 390

I got the same error in console, after I installed Ace Stream Web Extension

Upvotes: 1

Margus Kevin
Margus Kevin

Reputation: 195

If you are working with it on remote server, then download all WP files and folders to your local machine and use "Search from all files" function. It is included in most text editors (Sublime, Notepad++, Brackets, etc.). Then you can track where this code comes from. When it comes from certain plugin you can disable the plugin. Or just remove that code.

But you should search, where that code get in your WP in first place. Is it some uploaded file that's supposed to be filename.jpg but is filename.jpg.php or comes from plugin or theme.

(I'd comment it but too low rep :/ )

Upvotes: 0

Related Questions