The tricky part is, that if you are the site owned, it will NOT be visible to you. Unless you have the habbit of clearing your cookies. What the hack did was modify the wp_posts (or other prefixes) table, and modify the post_content by placing

<script src="xxxxxxxxxxxxxx"></script">

at the end of the line (of course, xxxxx is a URL which I have removed because of security reasons). So, if you are experiencing the same problem, go into your database, and see if you see a <script in your _posts table, in the post_content field.

What does the script do? Well is basicly comes down to his

1. The script determines if you have visited the website already (by looking through your cookies)
2. If you have already visited the website, it will just show you the normal page (so if you are the site owner you won't notice if your site has been affected if you don't clear your cookies)
3. If you haven't visisted the website, if will redirect you (through a tinyurl)

I fixed it by backing up the database, then dropping the _posts table , editing the sql for the _posts table , and did a replace all on the <script .. problems were solved after this.

I hope this helps some of you

When you submit a form with cforms and you use the qtranslate plugin, it automatically goes to the back to the default language page, and the form does not submit. Are you having this issue? The solution is below

Solution:

find

$content .= $ntt . '<form enctype="multipart/form-data" action="' . $action . '" method="post" class="cform'.( $cformsSettings['form'.$no]['cforms'.$no.'_dontclear']?' cfnoreset':'' ).'" id="cforms'.$no.'form"&gt;' . $nl;

insert the following BEFORE $content .= $ntt ..

if(strstr(get_locale(),'xx')!="") $action = '/xx'.$action;

replace xx with the two letter language code of the non default language