WordPress.org

Ready to get started?Download WordPress

Forums

Headway themes, wordpress, and security (7 posts)

  1. mgrmgrmgr
    Member
    Posted 2 years ago #

    i'm using wordpress 3.2.1 with headway theme 2.0.13
    (the latest versions of each)

    my site has been hacked twice in the last 2 weeks...while the fix was relatively simple...the vulnerability of my site is painfully obvious....

    i have 2 questions....
    has anyone using headway themes experienced something similar ...or is this more likely to be a security hole within wordpress?

    what are some sure-fire ways to optimize the security of my site?

    any input,advice, or resources would be much appreciated.

  2. Depends on how they were hacked. WordPress itself is pretty secure, but if, say, you were hacked via the TimThumb vulnerability that came around recently, that's a ... well known vector is a horrid word.

  3. ajmorris
    Member
    Posted 2 years ago #

    Well if you are a valid member you should post in our forums rather than WordPress forums. :) you can visit them here, http://support.headwaythemes.com. You will need your Headway user account to gain access. The problem actually stems from not deleting the previous versions of Headway on your WordPress install. If you are running 2.0.13 you just need to delete the previous versions of Headway. There's no need for them to be installed anyways. :)

    If you still need help after that, please post to our forums so we can help you out.

  4. mgrmgrmgr
    Member
    Posted 2 years ago #

    thank you for your reply...

    i'm still relatively new at the whole web thing so im not sure if it was TimThumb or not ...although the forums at headway addressed the same issue and released an update with a patch....

    the first attack made changes to the functions.php, and changed the username and password to my account....

    the second attack seemed to come from a different hacker who placed a index.htm file in the root directory.....

    i have no clue how this was done.....but i would really like to know how to prevent it from happening again....

    im not sure what i've done to leave my site so vulnerable....

  5. mgrmgrmgr
    Member
    Posted 2 years ago #

    @ ajmorris:

    i saw your comment in my email, but i dont see it here...
    anyway...i was just headed over to the headway forums to post the same question..lol (just thought i'd cover all my bases)...and yes...i am guilty of having old versions still installed....

    thank you for your input and assistance...the WP & HWT communities are amazingly supportive...THANKS!

  6. Spam catcher caught the post. Fixed it.

  7. ajmorris
    Member
    Posted 2 years ago #

    @mgrmgrmgr like I said, you need to head to the Headway forums if you want proper Headway help. The WordPress community can only help so far and if they have Headway. :) Not trying to be difficult, just want to make sure you get the support you need. :)

Topic Closed

This topic has been closed to new replies.

About this Topic