Basically my friend has a custom wordpress site which was hacked recently but apparently the dev cleaned it up (said it