Forums

Wordpress site hacked (3 posts)

  1. rwkyle
    Member
    Posted 4 months ago #

    I have been helping support a server and we are having a problem with a Wordpress site we have. Been reading about all the Cialis and Viagra stuff that has been popping up on sites and of course ours has it also. It only seems to show up when you rss the site. When I rss it with google reader I see the Cialis and Viagra stuff but it is not a link, just text. The site is http://www.lib.clemson.edu/weblog/. When I look at it in a google feed reader I see this.."ow To Buy ViagraOnline Pharmacy CialisCialis ViagraCialis Online CanadaCialis No PrescriptionViagra Sales OnlineDiscount CialisViagra By MailViagra RxGeneric ViagraBuy Viagra CanadaCanadian Pharmacy ViagraViagra For Sale OnlineViagra LevitraBuy-cialis.htmCialis ForumBuy Cialis CheapCialis PurchaseViagra UseCialis By MailCheap Generic CialisCialis On-lineLow Cost CialisViagra DoseViagra 25mgFree CialisCialis Rug Side EffectsBuy-cialis.htmViagra PfizerBuy Discount CialisGeneric Viagra For SaleViagra PrescriptionsCialis ViagraTadalafil CialisProfessional CialisHow To [...]".

    Problem is I can't find where it is calling it from. I think we have closed up the backddoor where it came in at. We are running 2.82. If I need to add anything else please let me know and thanks ahead of time for any help...

  2. ClaytonJames
    Member
    Posted 4 months ago #

    It's hidden in your post titled "Test", for starters.

    <div id="block_code"><font style="overflow: hidden; position: absolute; height: 0pt; width: 0pt;">

    About five miles of spam attached to that.

  3. rwkyle
    Member
    Posted 4 months ago #

    Thanks for the help ClaytonJames but where did you find that? I can't find that string anywhere. I have deleted the test posts and the text still shows up on the last legitimate post but I still can't find the string you posted.

    Thanks.

Reply

You must log in to post.

About this Topic