I'm working on a client's site and I noticed that posts have a hidden &lt;div&gt; filled to SPAM links to dick pills, etc. Hoping to get lucky, I searched for some of the keywords in the database tables, but found no matches. I also searched the code in all the files, and also found no matches.

I know that Wordpress hacks can be very tricky to remove, and they go to great lengths to make them hard to find. But perhaps there are some "usual suspects" that I could check, or maybe some tell-tale signs I could look for. 

I'm not asking for anyone to solve this specific hack. I'm just looking for advice on where (in general) to look.

In case it's useful, here's the unauthorized &lt;div&gt; which is injected right before the close of the first &lt;\p&gt;:

&lt;div id='hideMeya'&gt; At that requires looking for how you http://www.cialis.com &lt;a href="http://wwxcashadvancecom.com/" title="want $745? visit our site."&gt;want $745? visit our site.&lt;/a&gt; sign any of money. Visit our secure bad creditors that cialis levitra sales viagra &lt;a href="http://www10525.c3viagra10.com/" title="viagra australia online"&gt;viagra australia online&lt;/a&gt; payday lenders know otherwise. But the black you stay on discount price levitra &lt;a href="http://www10385.x1cialis10.com/" title="what is impotence in men"&gt;what is impotence in men&lt;/a&gt; duty to their lives. Citizen at one online or after receiving their research viagra online &lt;a href="http://www10675.80viagra10.com/" title="www.viagra.com"&gt;www.viagra.com&lt;/a&gt; to just take just wait until monday. This specifically relates to shop every pay stubs get viagra without prescription &lt;a href="http://www10154.40cialis10.com/" title="cialis overnight delivery"&gt;cialis overnight delivery&lt;/a&gt; and only used or faxing required. We will turn double checked by some small business loans viagra for woman &lt;a href="http://www10077.x1cialis10.com/" title="cialis india"&gt;cialis india&lt;/a&gt; sites that works the business before approval. Living paycheck went out cash there would generate levitra &lt;a href="http://www10450.a1viagra10.com/" title="viagra cialis levitra"&gt;viagra cialis levitra&lt;/a&gt; the scheduled maturity day method. Own a short application on when money also buy cialis online &lt;a href="http://buy4kamagra.com/" title="kamagra"&gt;kamagra&lt;/a&gt; plenty of personal initial limits. Even those loans quick because lenders realize http://cialis-ca-online.com &lt;a href="http://levitra4au.com/" title="levitrafroaustraila"&gt;levitrafroaustraila&lt;/a&gt; you notice a payday advance. A loan applications are more common thanks http://www.cialis2au.com/ &lt;a href="http://buy-7cialis.com/" title="cialis"&gt;cialis&lt;/a&gt; to only apply online website. Third borrowers will use your paycheck to levitra online pharmacy &lt;a href="http://www10675.30viagra10.com/" title="viagra online purchase"&gt;viagra online purchase&lt;/a&gt; utilize these individuals can cover. Often there must also referred to ensure online pharmacy viagra usa &lt;a href="http://www10600.90viagra10.com/" title="viagra effectiveness"&gt;viagra effectiveness&lt;/a&gt; you with financial expenses. Thanks to checking account also merchant cash loan wwwwviagracom.com &lt;a href="http://www10075.90viagra10.com/" title="levitra viagra cialis"&gt;levitra viagra cialis&lt;/a&gt; comparison to state or from there. At that they pay them in mere viagra &lt;a href="http://www10225.30viagra10.com/" title="cheapest generic viagra"&gt;cheapest generic viagra&lt;/a&gt; seconds and to comprehend. If a repossession or limited to see if approved www.cashadvances.com  | Apply for a cash advance online! &lt;a href="http://www10385.70cialis10.com/" title="cialis dosage"&gt;cialis dosage&lt;/a&gt; the risks associated at your current address. Second borrowers should not start and struggle http://www.cashadvance.com &lt;a href="http://levitra-online-ca.com/" title="levitra for sale"&gt;levitra for sale&lt;/a&gt; at least a button. Thanks to send the benefits of everyday living cheapest viagra order online &lt;a href="http://www10462.70cialis10.com/" title="tadalafil"&gt;tadalafil&lt;/a&gt; from being foreclosed on its benefits. Finally you get help rebuild the original loan buy cialis viagra &lt;a href="http://viagra5online.com/" title="viagra without prescription"&gt;viagra without prescription&lt;/a&gt; can really only to surprises. Bank loans out you will take http://wviagracom.com/ &lt;a href="http://www10539.40cialis10.com/" title="erectile dysfunction supplements"&gt;erectile dysfunction supplements&lt;/a&gt; the conditions are a. Bills might provide an unexpected car cialis uk suppliers &lt;a href="http://kamagra-ca-online.com/" title="kamagra"&gt;kamagra&lt;/a&gt; broke a repayment length. Third borrowers repay because payday industry has the results http://www.buy9levitra.com/ &lt;a href="http://www10075.20viagra10.com/" title="viagra recreational use"&gt;viagra recreational use&lt;/a&gt; by the middle man and check process. After verifying your question with dignity and credit cards www.levitra.com &lt;a href="http://www10300.b2viagra10.com/" title="overnight viagra delivery"&gt;overnight viagra delivery&lt;/a&gt; or drive to secure loan online. Most people for dollars you between bad and free cialis &lt;a href="http://viagra7au.com/" title="http://viagra7au.com/"&gt;http://viagra7au.com/&lt;/a&gt; instead these applicants is available. Social security against your payday the larger sums buying viagra online &lt;a href="http://payday7online.com/" title="direct lenders installment loans no credit check"&gt;direct lenders installment loans no credit check&lt;/a&gt; of gossip when working telephone calls. Face it provides hour payday industry levitra online &lt;a href="http://www10150.30viagra10.com/" title="buy viagra now"&gt;buy viagra now&lt;/a&gt; has high credit score? Within minutes during your best score range from http://cashadvance8online.com &lt;a href="http://www10450.60viagra10.com/" title="viagra dosage instructions"&gt;viagra dosage instructions&lt;/a&gt; fees if there for them most. To avoid paperwork you in crisis arise from wwwpaydayloancom.com | Online Payday Loans application form! &lt;a href="http://www10225.80viagra10.com/" title="super active viagra"&gt;super active viagra&lt;/a&gt; online from paying the bank? Funds will know to throwing your cash advance no credit check &lt;a href="http://orderviagrauaonline.com/" title="viagara online"&gt;viagara online&lt;/a&gt; finances there that purse. Companies realize that asks for which can become cialis online &lt;a href="http://www10375.60viagra10.com/" title="sublingual viagra"&gt;sublingual viagra&lt;/a&gt; eligible to paycheck some lenders. Medical bills that be much easier than actually need only online cash advance &lt;a href="http://cashadvance8online.com" title="online cash advance"&gt;online cash advance&lt;/a&gt; your funds via the freedom you out.  &lt;/div&gt;&lt;script type='text/javascript'&gt;if(document.getElementById('hideMeya') != null){document.getElementById('hideMeya').style.visibility = 'hidden';document.getElementById('hideMeya').style.display = 'none';}&lt;/script&gt; &lt;/p&gt;



Question: Expectation values of $(x,y,z)$ in the $|n\ell m\rangle$ state of hydrogen?
Answer: You're confusing the expectation values of the vector $\mathbf{r}=(x,y,z)$ and its magnitude $r=\sqrt{x^2+y^2+z^2}$. Because the hydrogen hamiltonian is parity invariant, all its eigenfunctions are chosen to have a definite parity. This means that the expectation value $\langle\mathbf{r}\rangle$ will always be zero because each component is the integral of an odd function times an even probability distribution function.

The second expectation value you mention,
$$\langle n,l,m|r|n,l,m\rangle=\int \mathrm{d}x \mathrm{d}y \mathrm{d}z \psi_{n,l,m}^\ast(x,y,z)\sqrt{x^2+y^2+z^2}\psi_{n,l,m}(x,y,z),$$
is quite different, since you're not counting the direction of the distances you add. This is the same as comparing the averages of $x$ and $|x|$ over some 1D probability distribution function $p(x)$. The average of $x$ will be zero if $p(x)$ is even, while the average of $|x|$ will only vanish is $p$ is a delta function, concentrated at the origin. Thus $\langle|x|\rangle$ can be quite large while $\langle x\rangle$ is zero because of cancellations.



This is not to say that expectation values of $\mathbf{r}$ are not interesting, but one must simply be more careful. The fact that the diagonal matrix elements vanish says that the eigenstates have no permanent dipole moment - which of course they can't as they are eigenstates of an isotropic system. What doesn't vanish, however, are the transition matrix elements,
$$\langle n',l',m'|\mathbf{r}|n,l,m\rangle,$$
which play an important role in the hydrogen atom's interaction with radiation. (Specifically, they control the leading-order interaction energy, which is the dipole coupling $-q\mathbf{r}\cdot\mathbf{E}$.) Because the components of $\mathbf{r}$ are themselves spherical harmonics of degree 1 (or linear combinations of them), the matrix element above will involve the spherical integral
$$\int\mathrm{d}\Omega \, Y_{l'm'}^\ast Y_{1,\mu} Y_{lm}$$
for $\mu=-1,0,1$. 

Because the spherical harmonics have a rich orthogonality structure, only a few of these integrals will survive. Specifically, you need $\Delta l=|l-l'|=1$ and $m'=m+\mu$, which has the physical content of the dipole selection rules: for a dipole coupling to radiation, only S-P, P-D, D-F, ... transitions are allowed. Further, only a few spatial orientations are allowed: $m$ can increase or decrease by one (which happens if $|\mu|=1$, and corresponds to circularly polarized light in either direction, with the electric field rotating in the $x,y$ plane) or stay the same (when $m=0$ and the light is linearly polarized along $z$).