WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] HACKED! (16 posts)

  1. Marque
    Member
    Posted 7 years ago #

    Help me, I've just been hacked and the password recovery won't work. I've no clue what to do...

    http://themarque.org/

  2. whooami
    Member
    Posted 7 years ago #

    Use phpmyadin.

    http://codex.wordpress.org/Resetting_Your_Password#Through_phpMyAdmin

    and maybe NOW is a good time to upgrade your blog.

    2.1 is 4 months old and there have been innumerable security issues that have been discussed here and on here:

    http://wordpress.org/development/

  3. Marque
    Member
    Posted 7 years ago #

    Hmm, well thanks for the help but I'm really confused. I have no clue how to even install phpMyAdmin and I dont even use MySQL.

  4. Kahil
    Member
    Posted 7 years ago #

    you may want to contact your host then. Most hosts already have it installed. Maybe they can either let you know how to access it or maybe they can help to reset your password.

  5. Sean
    Member
    Posted 7 years ago #

    Marque, does your host offer cpanel? If so, phpMyAdmin is accessible though a small text link at the bottom of your MySQL page.

    And yeah, do upgrade ASAP.

  6. Marque
    Member
    Posted 7 years ago #

    Alright so I've contacted my host, but haven't heard back yet. Also, I've upgraded to the latest version of wordpress. I still can't log in...

    But I do think that my host offers cpanel...but I dont know about MySQL.

  7. Sean
    Member
    Posted 7 years ago #

    Okay, well log into your cpanel, and you should see a bank of buttons. 'MySQL' should be in there; usually in the third row, third column. Click on it, and then scroll to the very bottom of the page. There should be a small text link for phpMyAdmin.

    Once in phpMyAdmin, choose your wordpress database from the dropdown menu on the left hand side. Then select the 'wp_users' table from the list that will appear below the drop down menu. You can edit the user_pass field from there.

    This wiki will probably help.

  8. Sean
    Member
    Posted 7 years ago #

    Okay, that might be a little difficult, since the distinct value you see in phpMyAdmin is a scrambled version of the password.

    I'm a newbie at this, so I don't know if this will work, but changing the value to '21232f297a57a5a743894a0e4a801fc3' should set the password to 'admin'--I think--. Log in immediately and change the password.

  9. PozHonks
    Member
    Posted 7 years ago #

    Go to this web site:
    http://pajhome.org.uk/crypt/md5/

    Enter your password and click on the MD5 button. Then, copy the result in phpMyadmin.

  10. macsoft3
    Member
    Posted 7 years ago #

    Marque, I'm sorry to hear your trouble. Here are a couple of simple suggestions.

    (1) Use special characters and Greek letters, lower and upper case letters to make up a password for your admin login to WordPress blog as well as your control panel with your hosting company. Some control panels do let you use Greek letters. Others don't. That all depends on the hosting company even for the control panel developed by the same company.

    (2) Destroy the domain. Hacker5.com or whatever it is... Contact the domain company through which this domain is registered.

    (3) By the way, you may want to back up database with phpAdmin like other guys say and then reinstall WP.

    Good luck

    Tom Bluewater
    mhvt.net

  11. Marque
    Member
    Posted 7 years ago #

    Alright, guys. Thanks a whole lot. All of that worked and now I am into my dashboard again. I changed my password (even though it was already very secure), changed my email address back, and upgraded wordpress. I also contacted the site that the domain, hack15.com is registered too which is http://www.enom.com. Hopefully they will do something about it.

    Haha, but now I have another problem after upgrading, my dashboard is all messed up...but Ill have to make another topic for that one.

    By the way, what should I CHMOD my directories and files to?

  12. Marque
    Member
    Posted 7 years ago #

    Wow, I just noticed they erased all my pages too. That makes me furious.

  13. whooami
    Member
    Posted 7 years ago #

    directorys: 755
    files: 644

  14. Marque
    Member
    Posted 7 years ago #

    Thanks. This can be marked as resolved I guess. I dont have any hacker related problems as of now, except that all my pages are gone and my dashboard doesnt work...

    :)

  15. macsoft3
    Member
    Posted 7 years ago #

    If you set the permission of a directory to 711, the folder structure will be disclosed, just for your info...

  16. jennifre
    Member
    Posted 7 years ago #

    I had this same problem and I just wanted to let all of you intelligent people know that YOU ARE MY HEROES.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags