{"id":471,"date":"2012-11-09T19:57:32","date_gmt":"2012-11-10T00:57:32","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2012\/11\/09\/clean-up-code-injection-attack\/"},"modified":"2021-08-16T23:29:25","modified_gmt":"2021-08-17T03:29:25","slug":"clean-up-code-injection-attack","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/","title":{"rendered":"How to Clean up a Code Injection Attack"},"content":{"rendered":"

In this article we\u2019ll discuss how to clean up a code or script injection<\/strong> that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.<\/p>\n\n\n\n

Typically code injections are carried out by an attacker uploading a PHP shell script to your account, either by compromising your FTP credentials, or by exploiting usually outdated software that you might have running on your website.<\/p>\n\n\n\n

Below are steps for cleaning up a wide spread script injection that occurred on a WordPress site. We could tell that something went wrong because when we tried to view the site today it was simply showing a blank page, and when we went in to investigate it was obvious that a code injection had taken place.<\/p>\n\n\n\n

It\u2019s important to note that this would be considered an advanced task and you can only do this with a VPS or dedicated server plan. Additionally we can\u2019t take any responsibility for further damage you do to your website using this clean up method, so if you don\u2019t feel comfortable doing this be sure you make a full backup of your account prior to following these steps or contact our support team for help.<\/p>\n\n\n\n

Cleaning a Code Injection Attack<\/h2>\n\n\n\n
  1. Login to your server via SSH<\/a>.<\/li>
  2. Navigate to the user\u2019s \/public_html<\/strong> directory with the hacked website with the following command:\n\ncd ~userna5\/public_html\/<\/code>\n<\/li>
  3. Now open up that sites index page, in this case index.php<\/strong> using the vim<\/strong> text editor with the following command:\nvim index.php<\/code>\n<\/li>
  4. \nIt should be very obvious at the top of this file that there has been a script injection, usually one of the tell tale signs of a script injection is having a base64_decode<\/strong> function mentioned, especially if it\u2019s at the top of a bunch of scripts.\nYou\u2019ll want to copy the text starting at eval(base64_decode<\/strong> and grabbing about the first 10 or so characters, in most SSH clients simply highlighting text will copy it to the clipboard.
    \n
    \"vim-viewing-base-64-decode-string\"<\/a><\/figure>\n\n
    \u00a0<\/div>\n<\/li>
  5. Now you\u2019ll want to type in the following command using the text that you copied from the \/public_html<\/strong> directory:\ngrep 'eval(base64_decode(\"DQplcnJvcl' .\/ -Rl > HACKS<\/code>\n\n

    This will take some time to complete as it\u2019s going to look through all of your files for that string, it will be placing them in a file called HACKS<\/strong>.<\/p>\n<\/li>

  6. Now using that HACKS<\/strong> file in a loop, we want to create a backup copy of each injected script with the suffix -HACKED<\/strong> using the following command in case when we are stripping out the injection it happens to grab any good code accidentally:\nfor hackFile in `cat HACKS`; do cp -frp $hackFile $hackFile\"-HACKED\"; done<\/code>\n<\/li>
  7. Now we can use the same loop, but this time using the sed<\/strong> command to replace the code injection of each original file:\nfor hackFile in `cat HACKS`; do sed -i 's#<?php.*eval(base64_decode(\"DQplcnJvcl.*));#<?php#' $hackFile; done<\/code>\n

    What this sed<\/strong> command is doing is using the -i<\/strong> flag for an in place replacement, the \u2018s#<\/strong> part is telling it we\u2019re doing a string replace, with the #<\/strong> symbol being the delimiter of our strings.<\/p>\n

    The next part is the sting we want to replace, it begins with <?php<\/strong> then we are using .*<\/strong> to state any character at all, followed by eval(base64_decode(\u201cDQplcnJvcl<\/strong> which is the part of the injection we had copied earlier, then finally it ends with another .*<\/strong> to grab all of the rest of the text till finally the last part of the string\u00a0));<\/strong> is encountered.<\/p>\n

    After the second #<\/strong> we put the string we want the first string to be replaced with, in this case just <?php<\/strong>, then we finish up the\u00a0sed<\/strong> command with another\u00a0#\u2019<\/strong> then we put\u00a0$hackFile<\/strong> after the\u00a0
    <\/strong>full\u00a0sed<\/strong> command since that will be the file name of the current file in our loop.<\/p>\n<\/li><\/ol>\n\n\n\n

    Now try to load your site again and hopefully it is back to normal. Depending on the severity of the code injections sometimes this won\u2019t be enough to clean it up, but in most cases this should do the trick.<\/p>\n","protected":false},"excerpt":{"rendered":"

    In this article we\u2019ll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly. Typically code injections are carried out by an attacker uploading a PHP shell script Read More ><\/a><\/p>\n","protected":false},"author":57014,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4299],"tags":[],"class_list":["post-471","post","type-post","status-publish","format-standard","hentry","category-security"],"acf":[],"yoast_head":"\nHow to Clean up a Code Injection Attack | InMotion Hosting<\/title>\n<meta name=\"description\" content=\"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Clean up a Code Injection Attack | InMotion Hosting\" \/>\n<meta property=\"og:description\" content=\"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-11-10T00:57:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-17T03:29:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png\" \/>\n<meta name=\"author\" content=\"InMotion Hosting Contributor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"InMotion Hosting Contributor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\"},\"author\":{\"name\":\"InMotion Hosting Contributor\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\"},\"headline\":\"How to Clean up a Code Injection Attack\",\"datePublished\":\"2012-11-10T00:57:32+00:00\",\"dateModified\":\"2021-08-17T03:29:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\"},\"wordCount\":675,\"commentCount\":15,\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png\",\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\",\"name\":\"How to Clean up a Code Injection Attack | InMotion Hosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png\",\"datePublished\":\"2012-11-10T00:57:32+00:00\",\"dateModified\":\"2021-08-17T03:29:25+00:00\",\"description\":\"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png\",\"width\":891,\"height\":452,\"caption\":\"vim-viewing-base-64-decode-string\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.inmotionhosting.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Clean up a Code Injection Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support & Tutorials\",\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/inmotionhosting\/\",\"https:\/\/x.com\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\",\"name\":\"InMotion Hosting Contributor\",\"description\":\"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/inmotion-hosting\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting\"],\"url\":\"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Clean up a Code Injection Attack | InMotion Hosting","description":"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/","og_locale":"en_US","og_type":"article","og_title":"How to Clean up a Code Injection Attack | InMotion Hosting","og_description":"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.","og_url":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2012-11-10T00:57:32+00:00","article_modified_time":"2021-08-17T03:29:25+00:00","og_image":[{"url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png","type":"","width":"","height":""}],"author":"InMotion Hosting Contributor","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"InMotion Hosting Contributor","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/"},"author":{"name":"InMotion Hosting Contributor","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644"},"headline":"How to Clean up a Code Injection Attack","datePublished":"2012-11-10T00:57:32+00:00","dateModified":"2021-08-17T03:29:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/"},"wordCount":675,"commentCount":15,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png","articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/","url":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/","name":"How to Clean up a Code Injection Attack | InMotion Hosting","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png","datePublished":"2012-11-10T00:57:32+00:00","dateModified":"2021-08-17T03:29:25+00:00","description":"In this article we'll discuss how to clean up a code or script injection that might have occurred on your website that is causing it to try to load malicious content to your visitors, or preventing your site from displaying properly.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#primaryimage","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2012\/11\/website_website-troubleshooting_script-injections_vim-viewing-base-64-decode-string.png","width":891,"height":452,"caption":"vim-viewing-base-64-decode-string"},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/security\/clean-up-code-injection-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"How to Clean up a Code Injection Attack"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support & Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644","name":"InMotion Hosting Contributor","description":"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!","sameAs":["https:\/\/www.linkedin.com\/company\/inmotion-hosting\/","https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"primary_category":null,"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/57014"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=471"}],"version-history":[{"count":3,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/471\/revisions"}],"predecessor-version":[{"id":85336,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/471\/revisions\/85336"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}