Drew Douglass DrewDouglass

## steps.txt
Cleaning a (typical) Hacked Site
- Create backup of site
- Deactivate any unnecessary plugins. Delete any plugins and themes that are not in use.
- Update all plugins and WordPress through WP admin. We'll replace everything later, but this allows any database updates to happen.
- Download wordpress.org/latest.zip.
- Download fresh copies of every plugin.
- If ACF 4.x installed, upload ACF 5.x and go through database updates (if multi-site, have to go through each site as of now). Then delete ACF 4.x and add-on plugins.
- Review wp-config.php to make sure there is no malicious code. If not confident, install fresh copy of wp-config.php with correct database information.
- Deactivate site by commenting out database info in wp-config.php
- Delete all files and folders in root directory except wp-config.php and wp-content/, and possibly any non-WP folders such as emails.

## rsync.sh
# Simple with recursion and info/progress
rsync -havzP --stats remote@host:/your/path ~/Desktop/your/folder

#Custom Port
rsync -chavzP --stats -e "ssh -p 1999" remote@host:/path/to/files ~/Desktop/local/folder

## bootstrap-menu-hover.css
/***ADD THE JAVASCRIPT BELOW IF MAIN DROPDOWN ITEM TO BE CLICKABLE***/
/***http://stackoverflow.com/questions/8878033/how-to-make-twitter-bootstrap-menu-dropdown-on-hover-rather-than-click***/
.sidebar-nav {
    padding: 9px 0;
}

.dropdown-menu .sub-menu {
    left: 100%;
    position: absolute;
    top: 0;

## dnd.sh
#!/bin/bash

# https://apple.stackexchange.com/a/303400

set -eou pipefail

# From https://heyfocus.com/enabling-do-not-disturb-mode and
# https://apple.stackexchange.com/questions/145487

if [[ $(defaults -currentHost read ~/Library/Preferences/ByHost/com.apple.notificationcenterui doNotDisturb) -eq 0 ]]; then

## s3.sh
# Can also use --dryrun instead of --recursive to see what would have happened.
aws s3 cp s3://yourbucket/theoneyouwant/ ~/Desktop/bucket-backup --recursive

## s3_client.py
"""

The server application uses AWS S3 in various places.
This utility provides a common place for interacting
with S3 and handles the authentication in a unified manner.

"""

import os.path
import logging

## search_custom_columns.php
<?php
function cf_search_join( $join ) {
    global $wpdb;

    if ( is_search() ) {
        $join .=' LEFT JOIN '.$wpdb->postmeta. ' ON '. $wpdb->posts . '.ID = ' . $wpdb->postmeta . '.post_id ';
    }

    return $join;
}

## workaround-js.html
<!-- Assumes jQuery is loaded which is almost always the case -->
<img src="/your/image.jpg" alt="Logo" onload="$.getScript('https://yoursite.com/main.js');">

## getParams.js
var getUrlParameter = function getUrlParameter(sParam) {
    var sPageURL = window.location.search.substring(1),
        sURLVariables = sPageURL.split('&'),
        sParameterName,
        i;

    for (i = 0; i < sURLVariables.length; i++) {
        sParameterName = sURLVariables[i].split('=');

        if (sParameterName[0] === sParam) {

## findFonts.sh
strings ~/Desktop/filename.pdf | grep FontName
	Cleaning a (typical) Hacked Site
	- Create backup of site
	- Deactivate any unnecessary plugins. Delete any plugins and themes that are not in use.
	- Update all plugins and WordPress through WP admin. We'll replace everything later, but this allows any database updates to happen.
	- Download wordpress.org/latest.zip.
	- Download fresh copies of every plugin.
	- If ACF 4.x installed, upload ACF 5.x and go through database updates (if multi-site, have to go through each site as of now). Then delete ACF 4.x and add-on plugins.
	- Review wp-config.php to make sure there is no malicious code. If not confident, install fresh copy of wp-config.php with correct database information.
	- Deactivate site by commenting out database info in wp-config.php
	- Delete all files and folders in root directory except wp-config.php and wp-content/, and possibly any non-WP folders such as emails.
	# Simple with recursion and info/progress
	rsync -havzP --stats remote@host:/your/path ~/Desktop/your/folder

	#Custom Port
	rsync -chavzP --stats -e "ssh -p 1999" remote@host:/path/to/files ~/Desktop/local/folder
	#!/bin/bash

	# https://apple.stackexchange.com/a/303400

	set -eou pipefail

	# From https://heyfocus.com/enabling-do-not-disturb-mode and
	# https://apple.stackexchange.com/questions/145487

	if [[ $(defaults -currentHost read ~/Library/Preferences/ByHost/com.apple.notificationcenterui doNotDisturb) -eq 0 ]]; then
	# Can also use --dryrun instead of --recursive to see what would have happened.
	aws s3 cp s3://yourbucket/theoneyouwant/ ~/Desktop/bucket-backup --recursive
	"""

	The server application uses AWS S3 in various places.
	This utility provides a common place for interacting
	with S3 and handles the authentication in a unified manner.

	"""

	import os.path
	import logging
	<?php
	function cf_search_join( $join ) {
	global $wpdb;

	if ( is_search() ) {
	$join .=' LEFT JOIN '.$wpdb->postmeta. ' ON '. $wpdb->posts . '.ID = ' . $wpdb->postmeta . '.post_id ';
	}

	return $join;
	}
	<!-- Assumes jQuery is loaded which is almost always the case -->
	<img src="/your/image.jpg" alt="Logo" onload="$.getScript('https://yoursite.com/main.js');">
	var getUrlParameter = function getUrlParameter(sParam) {
	var sPageURL = window.location.search.substring(1),
	sURLVariables = sPageURL.split('&'),
	sParameterName,
	i;

	for (i = 0; i < sURLVariables.length; i++) {
	sParameterName = sURLVariables[i].split('=');

	if (sParameterName[0] === sParam) {