Source Medical Staffing — Project Notes
Status: Offboarding (April 2026) — company sold; new owners (Care Career / Sure Staff India) migrating site to Hostinger. Primary contact: Joy Pearson (President) — joypearson@carecareer.com / 402-315-1401 Migration contact: Sravan Kumar Nambi (Digital Marketing Mgr, Sure Staff India) — sravan@surestaffindia.com
Quick Reference
| Production URL | https://sourcemedicalstaffing.com |
| Local site | ~/Local Sites/source-medical-staffing/ |
| Theme | app/public/wp-content/themes/source-medical/ |
| Local URL | http://source-medical-staffing.local |
| GitHub | grainandmortar/source-medical-staffing (private — legacy theme, no build tools) |
| Theme docs | theme/CLAUDE.md |
Integrations (verified 2026-04-28)
| Service | Provider | Notes / Account Owner |
|---|---|---|
| Hosting | Flywheel — Source-owned account | Confirmed via response headers (x-fw-server: Flywheel/5.1.0) and Eric. Two installs: production (source-medical-staffing.flywheelsites.com) + dev (source.flywheelsites.com) |
| Domain registrar | Enom (now GoDaddy-owned) | Per masterdoc; user 1979jpearson (Joy Pearson). WHOIS reports GoDaddy because GoDaddy acquired Enom — the domain itself is registered under Joy's account |
| DNS | Hover — Source-owned | NS records: ns1.hover.com / ns2.hover.com |
| Email (MX) | Microsoft 365 / Outlook | MX → sourcemedicalstaffing-com.mail.protection.outlook.com. Already client-owned |
| WP version | 6.9.4 | |
| Theme | Custom (G&M, ~2019) — source-medical |
Legacy, no build tools, no Tailwind |
| GA4 | G-9J2ZB8F3F8 |
Hardcoded in header.php. Account ownership: TBD (likely G&M-owned originally) |
| Adobe Typekit | Kit ID tgu7kvn |
Loaded in header.php. Account ownership: TBD |
| Job feed source | Google Sheet | https://docs.google.com/spreadsheets/d/1WqeJWnDOSVJ8006qz9e6zAC-x9pnsJhPKJOBCuKAA1U — used by WP All Import to populate Jobs CPT |
| Masterdoc | Source Medical Staffing · Master | Has Client Logins tab with WP admin creds for prod + dev |
Plugins (premium / licensed)
| Plugin | License Owner |
|---|---|
| ACF Pro | TBD |
| Gravity Forms | TBD |
| FacetWP | TBD |
| WP All Import Pro (+ ACF Add-on) | TBD |
| Admin Columns Pro | TBD |
| Yoast SEO (free) | — |
| WP-Optimize (free) | — |
| Akismet | TBD |
Premium plugin licenses are typically held by G&M and won't transfer with the site. New owner will need their own licenses on Hostinger or accept that updates stop.
Custom Functionality / Things the New Host Needs to Know
- Jobs CPT (
jobs) — registered infunctions/post-type-jobs.php. Archive sorted bycrisis_paymeta field. - WP All Import — used to import jobs (likely from a feed). Reindex hook tied to FacetWP.
- Gravity Forms with sublabel visibility filter — apply, contact, etc.
- SmoothState.js AJAX page transitions (
.m-scenewrapper) — important: scripts injected to<head>may not re-execute on AJAX nav. - Waypoints + Animate.css scroll animations driven by
data-os-animationattributes on markup. - ACF Theme Options page used for global settings.
- No ACF JSON exports — fields live in DB only. Critical: any DB migration must include ACF field group post types or fields will break.
Active Work
| Date | Item |
|---|---|
| 2026-04-15 | Joy forwarded Sravan's request for migration access |
| 2026-04-16 | Eric replied — flagged outstanding maintenance invoices, must clear before handover |
| 2026-04-21 | Joy confirms AP processed payment |
| 2026-04-28 | Joy follows up — wants call to finalize transfer |
| 2026-04-28 | 🚨 Site is hacked. Production throwing 500. Webroot has webshells (/www/manger/, /www/style.php, /www/widgets/, etc.), 2 fake themes, 7 malicious plugins, 8 fake admin users (still being created daily). Plan: restore from Flywheel backup ≤ April 5, then rotate creds + update plugins + verify. Cleanup blocks the migration handoff. |
| 2026-04-28 | ✅ Restore complete. Restored from Apr 5 (3:06a UTC) backup. Then manually deleted 4 dormant malware plugin folders (file-manager-advanced, fileorganizer, filester, wp-file-manager). DB users back to 4 legit (Joy, Eric, Clark, gmlaunch). Active plugins: 13 legit. Front-end 200 OK and rendering correctly. Outstanding: /www/s/ (srdb tool from 2019, root-owned) needs Flywheel support ticket to remove. Entry vector likely was /www/s/index.php — exposed search-replace-DB UI. |
Open Questions for Eric
See client-comms/2026-04-28-migration-questions.md for the inline response draft and outstanding TBDs.
Files in this Folder
- README.md — this file
- client-comms/ — email correspondence and response drafts