wp-rocket | Performance optimization plugin for WordPress | Content Management System library

This is very similar to this question that was asked recently: .htaccess redirect entire site from non-www/http to www/https

When the problem is per-directory .htaccess files, you can prevent the rules in those files from running after some rules by using the [END] flag. From the documentation:

Using the [END] flag terminates not only the current round of rewrite processing (like [L]) but also prevents any subsequent rewrite processing from occurring in per-directory (htaccess) context.

So you should be able to use [END] in your rules to make them take precedence over other rules in the subdirectories:

It's simple SEO. You need block GET request in robots.txt Just add its in robots.txt

Alright, I managed to solve it.

I know that "one size fits all" is not the case with malware. I asked for extra thoughts as someone might have a hint how to approach it as I'm well informed and capable of dealing with these situations through the years.

After numerous failed attempts to search various strings, trying to encode few words in hex and search those, searching through plugins etc. i inspected the cached .html file and noticed that these links were hidden under WooCommerce delivery-info div.

I then searched delivery-info string through all the WP files & I got around 50 hits. I found a suspicious line that one of the developers added, which was calling delivery-info div together with $content string.

I then searched $content string through all the plugins with numerous hits. After searching for a while I finally found the script that was causing it. It was hidden in WPBakery - js-composer/include/inc.php file which should not have existed. One of the lines from the file:

$abc1 = '' . $divclass . '' . $array[array_rand($array) ] . '';

I deleted that file & then searched inc.php with a hit in js-composer.php calling for it.

You should be able to use something like

You have to change the :focus

Try this: