WordPress.org

1. Envec83
   Member
   Posted 1 year ago #

   Hi,

   Last week I noticed a malicious redirect on my navigation links (that is, the "Next Posts" pointing to Page 2, Page 3 and so on). I know some of you guys will say "it's the navigation plugin," but I don't use any.

   Here is one example of the links appearing on my site:

   http://www.mydomain.com/page/2/SERVERDOCUMENT_ROOT=http://www.daedongfur.co.kr/shop/log/.logs/id1.txt

   Somehow the redirect is not working though, cause once I click on the link I go to Page 2 of my blog normally (the URL contains the malicious link though). The traffic stats are also normal, so I am not losing visitors or anything.

   I checked all my database tables and site files and couldn't find anything.

   One clue I have is that it might be related to WP-SuperCache, because once I clear the cache files the malicious link disappears. I also removed the plugin completely and it seemed to solve the problem. Once I re-installed WP-SuperCache the links came back.

   Does anyone have a clue about where is the attack coming from?

   Thanks a lot in advance.

2. esmi
   Theme Diva & Forum Moderator
   Posted 1 year ago #

   I very much doubt that WP-SuperCache is the problem. It does, however, sound like your site has been hacked.

   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://wordpress.org/support/topic/268083#post-1065779
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://ottopress.com/2009/hacked-wordpress-backdoors/

3. Envec83
   Member
   Posted 1 year ago #

   I think it was hacked as well, but I think it's a cache-related hack. Else there would be no explanation for the redirect links to appear only when caching is turned on.

Topic Closed

This topic has been closed to new replies.