WordPress.org

1. bartoli3000
   Member
   Posted 2 years ago #

   Hello,

   I'm a big fan of WordPress because it is so easy to install with endless options and great to maintain, but. I'm the admin of a webpage which got hacked recently. It took me some time and a lot of sweat, but finally i upgraded to 2.8 and performed some security improvements, for which i hope they hold the next attack. All of my my index files in the root were contaminated with a malicious script, over and over again, every two days i had to overwrite those files, untill i did the next few things

   "wp_" renamed to "wp_somethingelse"
   installed plugin WP - Security Admin Tools and resolved all "red" markers (except the "admin" account)
   .htaccess file
   file and foldersecurity set to 644 and 755

   But now I have 2 questions, and i can't find a solution for them.

   1- I cannot add new users. In the dashboard i click "Users" and the only two things which appear are "Authors&Users" and "Your Profile", nothing more.

   2- I cannot edit existing pages (existing posts i can edit), but pages which are in draft i can edit. I can create a new page, but i cannot change the hierarchy of the pages anymore, or add categories for pages.

   I can create new posts, and i can edit them. I can create new pages, but i have to "submit for review" them, and i'm logged in with the "admin" account.

   It looks like my admin account has not enough rights anymore for 1- and 2-, but i can't put my finger on it. I tried with giving another account the admin rights, but no luck.

   Anybody a hint on where to look? Your help is very much appreciated

2. esmi
   Theme Diva & Forum Moderator
   Posted 2 years ago #

   Use something like Phpmyadmin to check your database. First, confirm your user id by checking in the wp_users table. Then check the wp_usermeta for that user_id. Where meta_key = wp_capabilities, you should have something in the meta_value field like:

   a:1:{s:13:"administrator";b:1;}

   Hope that helps.

3. bartoli3000
   Member
   Posted 2 years ago #

   Yup, that line is ok, it says exacty what you say here.

   (i'm not sure if it's safe to post here, but here we go)

   1 1 nickname bartoli
   Edit Delete
   2 1 rich_editing true
   Edit Delete
   3 1 admin_color fresh
   Edit Delete
   4 1 wp_12khscapabilities a:1:{s:13:"administrator";b:1;}
   Edit Delete
   6 1 wp_12khsautosave_draft_ids a:68:{i:-1225897950;i:6;i:-1225898016;i:8;i:-12258...
   Edit Delete
   7 1 closedpostboxes_page a:3:{i:0;s:20:"pagecommentstatusdiv";i:1;s:15:"pag...
   Edit Delete
   8 1 closedpostboxes_post a:8:{i:0;s:7:"tagsdiv";i:1;s:11:"postexcerpt";i:2;...
   Edit Delete
   9 1 closedpostboxes_link a:1:{i:0;s:0:"";}
   Edit Delete
   32 1 closedpostboxes_nggmanagegallery a:1:{i:0;s:0:"";}
   Edit Delete
   48 1 wp_12khsmetaboxorder_dashboard a:4:{s:6:"normal";s:70:"dashboard_right_now,dashbo...
   Edit Delete
   49 1 screen_layout_dashboard 2
   Edit Delete
   55 1 wp_12khsusersettings m0=o&m1=c&m2=c&m3=c&m4=c&m5=c&m6=c&m7=c&m8=c&m9=c&...
   Edit Delete
   51 1 comment_shortcuts false
   Edit Delete
   56 1 wp_12khsusersettingstime 1247057134
   Edit Delete
   58 1 wp_12khsuser_level 10

4. user_0000450233
   Member
   Posted 2 years ago #

   m1

Topic Closed

This topic has been closed to new replies.