Site was hacked??? Need some help

by zozja

Posted: 13 years ago 17 replies

INTERNET MARKETING

Hey Warriors,

My website was hacked or something.... it's a wordpress blog site and I went to log in at website (dot) com/wp-admin and there was this weird error page that said I needed to upgrade. I went to my ftp and saw a couple strange files called UNPROTECTED.htaccess and something else. I deleted them and was able to log on to the WP control panel. Now, the homepage is showing up fine, but the other pages don't show up. I can't figure out what is going on. The links match the links in my WP control panel. Here is the website: hcggrantspass (dot) com

Any help would be most appreciated!!!

Rebecca

#hacked #site

adsense786 13 years ago

did you contact server provider?
- [ 1 ] Thanks
- 1 reply
{{ DiscussionBoard.errors[4657988].message }}
- MattVit 13 years ago
  
  Originally Posted by kaleelkr
  
  did you contact server provider?
  
  Why does he need to bother the server provider for a problem with his software?
  
  That's like asking a gas/petrol station attendant to help you with your car problems. They keep your car / website going, but it's your responsibility to maintain the car / website - not the server provider.
  
  Thanks
  
  Signature
  
  {{ DiscussionBoard.errors[4722593].message }}
zozja 13 years ago

no..... i didn't... do you think it's a web server problem??
- Thanks
{{ DiscussionBoard.errors[4657993].message }}
Istvan Horvath 13 years ago

Without ftp access and WP login nobody can tell what the problem is. If they say they can guess... they are lying.

I'd ask my host to take a look at the WP files and the database.

Before that:
- deactivate all plugins
- switch back to the default theme
- check if you can see your posts
(if yes, there is a problem with your theme, its files)
(if not, you are in trouble - might be a database problem)

GENERAL LESSON: When your site is hacked or you suspect it was - contact your host, don't chat in forums!!!
- [ 3 ] Thanks
- 1 reply
Signature
{{ DiscussionBoard.errors[4657996].message }}
- AnniePot 13 years ago
  
  Originally Posted by Istvan Horvath
  
  GENERAL LESSON: When your site is hacked or you suspect it was - contact your host, don't chat in forums!!!
  
  I've only ever been hacked once and that was through a regular html site I'd had online for about two years, not a WP blog. When I checked on it, the home page had been changed completely to direct my visitors to a porn site...yuk
  
  At the time, the first thing I did was contact the hosting company, (one of the well known ones). They replied in just a few words that there was nothing they could do, security of my site was my responsibility.
  
  I already had a long-standing account with Hostgator and within a few days I switched everthing across from the other company and closed my account with them.
  
  Thanks
  
  {{ DiscussionBoard.errors[4668291].message }}
zozja 13 years ago

I just deactivated my plugin, so it was something going on with them!!! THANKS ISTVAN!!!! Now, why would I go to my host first when you answered my problem so quickly
- Thanks
- 2 replies
{{ DiscussionBoard.errors[4658011].message }}
- dave_hermansen 13 years ago
  
  Yeah, I'd get the hosting company to move me to a backup & in the meantime you should change your main cpanel password. If you're lucky enough to be with a good web hosting company like HostGator, they'll likely do it right away and for little or no charge!
  
  Thanks
  
  Signature
  
  BizSellers.com - The #1 place to buy & sell websites!
  We help sellers get the MAXIMUM amount for their websites and all buyers know that these sites are 100% vetted.
  
  {{ DiscussionBoard.errors[4658022].message }}
- Istvan Horvath 13 years ago
  
  Originally Posted by zozja
  
  Now, why would I go to my host first when you answered my problem so quickly
  
  Because as you stated in your OP you have found strange files in your account... which is quite a sure sign of the account being compromised!
  That's why :rolleyes:
  
  [ 1 ] Thanks
  
  Signature
  
  {{ DiscussionBoard.errors[4658029].message }}
spearce000 13 years ago

I had a similar problem a while back. As others have suggested, you should get in touch with your hosting provider. If you're on a shared hosting account, it could be that the hacker is getting in via another account on the same server.

You should also see if your provder can restore a backed up version of your site from before the hack, as there may be hidden files on your webspace now that can proide a way in for hackers.

Finally, check for any files or scripts that have their permissions set to 777 as this is a back door for hackers. If you find any, change them to 755.

If this happens again, change to another hosting company. That's what I had to do in the end, as my previous hosting company's securty left a lot to be desired!
- Thanks
{{ DiscussionBoard.errors[4660469].message }}
mywebwork 13 years ago

Whenever I see a post like this my first inclination is to ask if you have a current backup? In many cases the simplest method of getting everything back together is to do a restore from a current backup.

While I am happy to hear that you have it resolved I still have the question - do you have a backup scheme and a current backup?

Bill
- Thanks
{{ DiscussionBoard.errors[4662063].message }}
kt1000 13 years ago

just restore all files from backup
- Thanks
{{ DiscussionBoard.errors[4667894].message }}
malco714 13 years ago

my site was on page one now is way back and goes to site called stuff gate a web site page anilizer give how much the stie is worth ip adress ,a bunch of other info.
- Thanks
{{ DiscussionBoard.errors[4720093].message }}

Tim Franklin

13 years ago

Just curious if you used an auto script installer to install wordpress? over the last month I have seen a number of wordpress exploits that take advantage of the auto installer process, (I have seen a number of products that recommend using an auto installer but in reality it is a bad idea)

Manually install wordpress, it really is the best way.

Thanks
1 reply

Signature

Bitcoin | Crypto | Blockchain Secrets |

{{ DiscussionBoard.errors[4722653].message }}

13 years ago

Originally Posted by Tim Franklin

Totally agree with you.

I never use auto-installers and i'm happy to do it manualy. It takes few minutes more, but its more safer than auto installers.

Thanks

{{ DiscussionBoard.errors[4722673].message }}

johnw18 13 years ago

Try also adding plugins such as login lockdown to prevent hacking of the admin (locks them out for an hour after multiple failed attempts).
- Thanks
- 1 reply
{{ DiscussionBoard.errors[4723158].message }}
- DeadGuy 13 years ago
  
  Your modified htaccess does mean that someone was fiddling around in your site. It's always a good practice to check AND MAKE ABSOLUTELY CERTAIN that you have ftp anonymous logins disabled on your server. Some hosting companies have this turned on by default.
  
  Thanks
  
  Signature
  
  You are making this work at home stuff way harder than it is. Ready for some sanity? Clear your head and start over.
  
  {{ DiscussionBoard.errors[4723334].message }}
Sophix 13 years ago

First place to start would be with your host, their admin may have changed some things.
- Thanks
{{ DiscussionBoard.errors[4723391].message }}

Site was hacked??? Need some help

Trending Topics

Google Ads, landing pages, and Clickbank links

Carry out better target audience research

YouTube gets shopping display tools and affiliate partnership updates

Membership area with multiple income streams

A Very Strange Internet Problem