WordPress.org

Ready to get started?Download WordPress

Forums

Image hacked (10 posts)

  1. Spen
    Member
    Posted 6 months ago #

    Hello there,

    A client's site seems to have been hacked and comments attached to an image within the site. All commenting is disabled.

    I haven't come across this kind of hack before - is anyone familiar with this and how it can be avoided in the future?

    Cheers :-)

  2. esmi
    Forum Moderator
    Posted 6 months ago #

  3. Spen
    Member
    Posted 6 months ago #

    That's great Esmi, you're a star.

    Have you heard of this particular problem?

    Cheers,

    Spencer

  4. sap123
    Member
    Posted 6 months ago #

    I have seen this recently, on sites where permissions are fine. is it some kind of bug with the latest wordpress verison? seems to be when comments are turned off on a post or hidden via css that the bots can get in to post...

  5. esmi
    Forum Moderator
    Posted 6 months ago #

    @sap123: If you require assistance then, as per the Forum Welcome, please post your own topic.

    This topic is about a hacked site and has nothing to do with any bugs in WordPress.

  6. Spen
    Member
    Posted 6 months ago #

    In the case of our particular problem, I had already removed the comments tags from the templates so that there was nothing for the bots to lock onto.

    The image that was 'hacked' was also in a page rather than a post.

  7. sap123
    Member
    Posted 6 months ago #

    really, you know that 100% set in stone do you that this site has been hacked? that in this particular instance a site has been hacked even though all the folder permissions are correct?

  8. esmi
    Forum Moderator
    Posted 6 months ago #

    @sap123: If you require assistance, post your own topic.

  9. Spen
    Member
    Posted 6 months ago #

    @sap123

    The site we built has all of the commenting functionality completely removed from all templates that generate pages - how else would 20 plus comments offering all manner of total crap appear in the WordPress backend?

  10. esmi
    Forum Moderator
    Posted 6 months ago #

    Were you aware that many comment bots target the WP core comment script directly? Even if you have comments turned off, I'd suggest running Akismet.

Reply

You must log in to post.

About this Topic