swmagic — 2012-08-23T17:55:54-04:00 — #1
I guess I've never thought about this, but...
Can CSS contain any executable code, as in an injected virus?
I'm trying to help a company that is utterly riddled with it in WP. I'm proposing a rebuild rather than a cleanse but just want to cover this base.
chris_upjohn — 2012-08-23T19:19:33-04:00 — #2
CSS is a browser side language there for the only way you would be able to execute harmful code in it would be to re-name the file to something like .exe or .php, If the CSS files you are looking at have been altered then it's due to poor server security or not keeping WordPress up to date.
jeff_mott — 2012-08-23T23:28:35-04:00 — #3
The closest you can get to a virus in CSS is [IE's expressions. Though, [URL="http://blogs.msdn.com/b/ie/archive/2008/10/16/ending-expressions.aspx"]they are being phased out](http://msdn.microsoft.com/en-us/library/ms537634(v=vs.85).aspx).
jeremyenglert — 2012-08-24T02:29:14-04:00 — #4
Was it a Pharma-hack by chance? I've had some experience cleaning those up. It's no fun.