WordPress.org

1. Marco Raaphorst
   Member
   Posted 1 year ago #

   I have 7 admins when I look at the users' panel. when I check php-admin they are not found in wp_users

   my site was hacked, I cleared it, new WP install, changed passwords on everything but counter of admin is not right. it shows a count of 7 but shows only 2 admins. I have 2 admins in my system. but where are these 5 extra admins?

   what is going on? a bug in wordpress showing the wrong number?

   it says 7, but I only have 2 admins in my systems. please explain where I can find and KILL the other 5! this is super serious. I found other info about this issue, but it's never solved. so strange, security should be high priority.

2. 123milliseconds
   Member
   Posted 1 year ago #

   You cannot fix the hack manually by trail and error.

   You already see evidence of this

   ONLY safe way; delete everything; ask host to restore latest backup.

   http://codex.wordpress.org/FAQ_My_site_was_hacked

3. Marco Raaphorst
   Member
   Posted 1 year ago #

   for sure?

   what if I export it xml and setup a new install and do an import?

   backups wouldn't work in this case, don't know exactly when it happened and it has happened in the past as well.

4. 123milliseconds
   Member
   Posted 1 year ago #

   The export WILL probably contain hidden hack stuff.

   2 weeks ago mine did.

   There might be hidden back doors called innocently readme.php that you do not see in folder hierarchy

5. Marco Raaphorst
   Member
   Posted 1 year ago #

   makins an export and checking the xml on bad items should work I think. lot of work, but I can't use a backup because I don't know when it was clean

Topic Closed

This topic has been closed to new replies.