WHAT the heck happend to my site?

13 years ago

Looks like you've been hacked, do you have a backup copy or contact your hosting company to see if they can do a restore?

EDIT:

Not sure how confident you are working with worpress itself? You may also want to consider hardening WP once you've completed a restore, I would suggest trying to fix what's been hacked wouldn't be wise, as you would have no idea what's been comprimised by the hacker.

http://codex.wordpress.org/Hardening_WordPress

Thanks
1 reply

Signature

Joint Venture With Other Digital Marketers | Blog | Podcast

{{ DiscussionBoard.errors[4156644].message }}

Kerry Finch 13 years ago

Yep - you've been hacked. Go straight to your host for help (and if it is HostGator they will sort it in quick time).
- [ 1 ] Thanks
Signature
Premium Writing Service - Get What You Pay For
NEW Done For You Content Packs For Resellers and Consultants
{{ DiscussionBoard.errors[4156663].message }}

SoEasyMoney

13 years ago

This is crazy.....wouldn't they have to have access to my wordpress admin to do this?

Thanks
2 replies

Signature

Let me do the hard work for you! DONE-FOR-YOU Niche Research Packs!

{{ DiscussionBoard.errors[4156664].message }}

Kerry Finch 13 years ago

No they don't. You have probably not kept up to date with Wordpress updates - do this in future because they are designed to combat these types of attacks.
- Thanks
Signature
Premium Writing Service - Get What You Pay For
NEW Done For You Content Packs For Resellers and Consultants
{{ DiscussionBoard.errors[4156673].message }}
idk007 13 years ago

Originally Posted by SoEasyMoney

This is crazy.....wouldn't they have to have access to my wordpress admin to do this?

no they wouldnt. there are many methods they can get in. including having access to a hacked server on wordpress. maybe your site wasnt the only one.
- Thanks
- 1 reply
{{ DiscussionBoard.errors[4156681].message }}
- Brian John 13 years ago
  
  sorry to hear about that.
  
  would be nice to find out who these cowards are...
  
  Thanks
  
  {{ DiscussionBoard.errors[4156749].message }}

Patrick

13 years ago

Thats terrible. Would be interesting to know the name of the hosting company.

Thanks
1 reply

Signature

Freelance WordPress Developer | Free WordPress Themes | Free WordPress Plugins | Free WordPress Support

{{ DiscussionBoard.errors[4156668].message }}

Kerry Finch 13 years ago

Originally Posted by schwarzes

Thats terrible. Would be interesting to know the name of the hosting company.

Unlikely a hosting problem
- Thanks
- 1 reply
Signature
Premium Writing Service - Get What You Pay For
NEW Done For You Content Packs For Resellers and Consultants
{{ DiscussionBoard.errors[4156675].message }}
- Patrick 13 years ago
  
  Originally Posted by Kerry Finch
  
  Unlikely a hosting problem
  
  lol i am not saying it is a hosting problem, just curious which host it is and which version of wordpress he was using.
  
  Thanks
  
  Signature
  Freelance WordPress Developer | Free WordPress Themes | Free WordPress Plugins | Free WordPress Support
  
  {{ DiscussionBoard.errors[4156709].message }}

retsek

13 years ago

Contact your host.

If you are with hostgator, contact them via LiveChat. They have special sauce to fix this.

If you have to do it yourself, then the easiest way out is to restore the site using a cpanel backup. Then immediately change all the passwords (including the ftp password). After that, you immediately update Wordpress and all the plugins. Go through your plugins list, and delete the junk that you do not need or no longer use.

Thanks

{{ DiscussionBoard.errors[4156703].message }}

SoEasyMoney

13 years ago

It is hosted on hostgator and I contacted their tech support and they are getting right on it.

Thanks Kerry...I will make sure I keep it updated!

Thanks

Signature

Let me do the hard work for you! DONE-FOR-YOU Niche Research Packs!

{{ DiscussionBoard.errors[4156704].message }}

Willie Murray

13 years ago

Like others have mentioned there are a multitude of ways they can hack your site, main thing is to get a restore done and then secure your site, as someone else mentioned software update with WP but seriously look into hardening WP to.

Thanks
2 replies

Signature

Joint Venture With Other Digital Marketers | Blog | Podcast

{{ DiscussionBoard.errors[4156711].message }}

SoEasyMoney

13 years ago

Originally Posted by william1872

Like others have mentioned there are a multitude of ways they can hack your site, main thing is to get a restore done and then secure your site, as someone else mentioned software update with WP but seriously look into hardening WP to.

Forgive the ignorance, but how do you "harden WP"?

Thanks
2 replies

Signature

Let me do the hard work for you! DONE-FOR-YOU Niche Research Packs!

{{ DiscussionBoard.errors[4156727].message }}

retsek 13 years ago

Originally Posted by SoEasyMoney

Forgive the ignorance, but how do you "harden WP"?

Here's a start
Hardening WordPress « WordPress Codex

Might I also suggest Vaultpress. It's a service by the makers of Wordpress. Its not free, but I use it on my two biggest blogs. It does backup / restore, security scanning, and more. Another nice feature is that they protect against core security issues with wordpress itself even if you haven't updated or forgot to update.
- [ 1 ] Thanks
{{ DiscussionBoard.errors[4156736].message }}
Willie Murray 13 years ago

Originally Posted by SoEasyMoney

Forgive the ignorance, but how do you "harden WP"?

I posted a link on my first reply to you Here it is

Hardening WordPress « WordPress Codex
- Thanks
Signature

Joint Venture With Other Digital Marketers | Blog | Podcast
{{ DiscussionBoard.errors[4156745].message }}

Mel White

13 years ago

Originally Posted by william1872

Like others have mentioned there are a multitude of ways they can hack your site, main thing is to get a restore done and then secure your site, as someone else mentioned software update with WP but seriously look into hardening WP to.

Gotta agree that it's a WP exploit going on. So many folks don't change passwords or lock down some of the features on comments. If you have an older version, there are know exploits that make them very vulnerable (there was one version, two years ago, that was pathetically easy to crack. The site that was hosting my webcomics used WordPress and we got hacked multiple times before WP got the update to fix the exploit.)

Thanks

Signature

Webmaster - Friends In Business
http://www.friendsinbusiness.com/board1
http://www.friendsinbusinessblog.com

{{ DiscussionBoard.errors[4157105].message }}

Troy_Phillips

13 years ago

A word press blog is bad but I have an article directory that has been hacked .. like a $400 script. Everything was fine until I started not accepting anything but original content.

Am wondering if it is even worth trying to rescue it if it was that easy to hack lol.

Thanks
1 reply

Signature

{{ DiscussionBoard.errors[4156738].message }}

Willie Murray

13 years ago

Originally Posted by Troy_Phillips

A word press blog is bad but I have an article directory that has been hacked .. like a $400 script. Everything was fine until I started not accepting anything but original content.

Am wondering if it is even worth trying to rescue it if it was that easy to hack lol.

Depends Troy, if you have a backup you can try a restore and then harden WP?

[ 1 ] Thanks
1 reply

Signature

Joint Venture With Other Digital Marketers | Blog | Podcast

{{ DiscussionBoard.errors[4156760].message }}

Troy_Phillips 13 years ago

Originally Posted by william1872

Depends Troy, if you have a backup you can try a restore and then harden WP?

It is not wordpress ... custom script .. while I try not to put links in post .. this is kind of different
- Thanks
- 3 replies
Signature
{{ DiscussionBoard.errors[4156780].message }}
- Patrick 13 years ago
  
  Originally Posted by Troy_Phillips
  
  It is not wordpress ... custom script .. while I try not to put links in post .. this is kind of different
  
  [.. HaCkED By ZIED BLANCO ..]
  
  Doesnt matter if it is Wordpress or any custom script. If you have the backup, you can just restore the files in the FTP and also restore the database and you are back to business !
  
  Thanks
  
  Signature
  Freelance WordPress Developer | Free WordPress Themes | Free WordPress Plugins | Free WordPress Support
  
  {{ DiscussionBoard.errors[4156796].message }}
- Jill Carpenter 13 years ago
  
  Originally Posted by Troy_Phillips
  
  It is not wordpress ... custom script .. while I try not to put links in post .. this is kind of different
  
  [.. HaCkED By ZIED BLANCO ..]
  
  Wow, like a wall of graffiti.
  
  Thanks
  
  Signature
  
  "May I have ten thousand marbles, please?"
  
  {{ DiscussionBoard.errors[4156810].message }}
- Willie Murray 13 years ago
  
  Originally Posted by Troy_Phillips
  
  It is not wordpress ... custom script .. while I try not to put links in post .. this is kind of different
  
  Restore from backup would do the trick, but then you'd need to get a developer to tighten down the code, I would remove the link to as you never know what they've installed on the site that could be downloaded on to computers?
  
  Thanks
  
  Signature
  
  Joint Venture With Other Digital Marketers | Blog | Podcast
  
  {{ DiscussionBoard.errors[4156866].message }}

anatoly14

Banned 13 years ago

[DELETED]

{{ DiscussionBoard.errors[4156830].message }}

mytoy78 13 years ago

Hey there,

Does anyone have any ideas on how to prevent this kind of stuff happening in the first place?

I've worked too hard and long for someone to 'do a number' on my sites!!!

Thanks in advance people

Colin
- Thanks
Signature

Do You Want To 'Share' Ideas On 'Viral' Posts For Developing Facebook Fan Pages? Join Us Here...
{{ DiscussionBoard.errors[4156861].message }}

Troy_Phillips

13 years ago

I took the link out but .. several have it in their post now. I have spent the better part of the day working on a new product but will see about the restore later tonight.

Will have my script lady check and see if she can find any holes that could be tightened up.

Thanks
1 reply

Signature

{{ DiscussionBoard.errors[4156919].message }}

Paul Barrs 13 years ago

Originally Posted by SoEasyMoney

This is crazy.....wouldn't they have to have access to my wordpress admin to do this?

Sorry Buddy, but take a number and get in line -

I recently installed a plugin called "Limit Login Attempts" which tracks the number of failed logins on my admin panel 9and blocks users etc)

Was amzed to see *at least* 3 or 4 attempts to get in each week; sometimes more.

Limit Login Attempts | devel.kostdoktorn.se

I also use Wordpress File Monitor which send me an email when files on my system have been changed -

WordPress File Monitor | Matt Walters

Couple of quick tips...

Paul Barrs
- Thanks
Signature

**********
It's Simple... I don't "sell" IM anymore, but still do lots of YouTube Videos
**********
{{ DiscussionBoard.errors[4156981].message }}

Ken Durham

13 years ago

Check your ftp log, error logs and access logs. You should be able to find out how access was gained. One of the biggest problems is people leaving directories with public write access. That and programmers not filtering for sql injections.

If you use FTP they may have gotten your log in credentials. Be sure to change all passwords. If they got in through ftp, your system may be infected. Be sure to scan your system before anything else.

Thanks

Signature

yes, I am....

{{ DiscussionBoard.errors[4156955].message }}

Owen Smith

13 years ago

I had a similar problem with wordpress. I found that there was malicious script within one of the plugins I installed which allowed the hacker instant access to amend my index page and random generate my admin password and username to a new set.

I would google all plugins you have prior to this happening to see if any others have reported hacking.

Contact your host who will surely restore your website.

If it is hostgator make sure you contact them before saturday as they wipe over the backups on sunday.

-Owen

Thanks

Signature

All the Hottest eBooks, Graphics, Software, Videos, Articles, and Templates you want with PLR and MRR. Join PLR Assassin Today!

{{ DiscussionBoard.errors[4157072].message }}

SoEasyMoney

13 years ago

Update: MANY (at least 4 that I know of so far) of my sites have been hacked. I'm working with hostgator right now to figure it out. WOW......never knew this was even possible

Thanks

Signature

Let me do the hard work for you! DONE-FOR-YOU Niche Research Packs!

{{ DiscussionBoard.errors[4157557].message }}

Leveragist

13 years ago

I had the same thing happen to one of my sites not too long ago. My IT guy fixed it by uploading the last backup that didn't have the malicious code. The bad news was the last "clean" backup was over 2 months prior. The good news was that I hadn't posted much new stuff, so it wasn't that difficult to put everything back again. It was still a pain in the a%#, though.

Now, I do constant backups and make sure all my WP plugins are up-to-date. I also delete plugins that I don't really need and plugins whose developers stopped updating them. These old/non-updated plugins are ripe for exploits.

Thanks

{{ DiscussionBoard.errors[4157570].message }}

WHAT the heck happend to my site?

Trending Topics

Best AI for spell checking & grammar (2024)?

Google Ads, landing pages, and Clickbank links

Carry out better target audience research

A Very Strange Internet Problem

YouTube gets shopping display tools and affiliate partnership updates