Forums

My site has been hacked into (25 posts)

  1. Phil Booth
    Member
    Posted 3 years ago #

    Urgent situation!
    My site has been hacked into. I get the following message:

    There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.

  2. mikey1
    Member
    Posted 3 years ago #

    Hi, where is your site, url?
    have you installed it, the message you're seeing is normally on installation, if you have not added a config file.
    mike.

  3. Phil Booth
    Member
    Posted 3 years ago #

    My site has been up for 2 years. It was hacked into early today.
    Thanks---Phil

  4. Phil Booth
    Member
    Posted 3 years ago #

    Hi Mike--Are you still there? Or are you busy??---Phil

  5. mikey1
    Member
    Posted 3 years ago #

    Hi Phil, yep still online, had to log out for a while.
    mike.

  6. Phil Booth
    Member
    Posted 3 years ago #

    I'm following some instructions that WPress offered concerning the:
    wp-config-sample.php

    I don't want to change anything and make things worse though. My tech expert is busy on another job for someone else. I hope I can get him on this soon, but in the meantime I'm having a look myself.

  7. Phil Booth
    Member
    Posted 3 years ago #

    By the way, Mike. Are you familiar with this problem from previous experience? Thanks--Phil

  8. mikey1
    Member
    Posted 3 years ago #

    Hi sgain,

    I'm following some instructions that WPress offered concerning the:
    wp-config-sample.php

    what were the instructions? More importantly, why do you think you've been hacked?
    mike.

  9. Phil Booth
    Member
    Posted 3 years ago #

    Hi--
    I have no idea why I've been hacked. Does anyone know why hackers hack?

    http://codex.wordpress.org/Editing_wp-config.php

    I'm looking at the instructions given on the above link...

  10. mikey1
    Member
    Posted 3 years ago #

    Hi, I only ask because so far you've said nothing about any hacks on your site, any code inserted anywhere etc.
    You say you site has been up and running two years, why are you editing the config.php file.
    (I know 1000 questions, but its best to know ) LOL
    mike
    PS. Don't tell me, you're in the process of upgrading.
    sorry I'm not being sarcastic.

  11. Phil Booth
    Member
    Posted 3 years ago #

    Hi--I'm not editing anything yet. The reason I'm looking into that is because, as mentioned in my first post above, I got the following message when logging onto WordPress:

    "There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file."

  12. mikey1
    Member
    Posted 3 years ago #

    Are you using ftp, check to see if there is a config file, if there isn't your site won't work anyway.Whats your url by the way.

  13. mikey1
    Member
    Posted 3 years ago #

    This message is wordpress preparing to install.

    "There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file."

  14. Phil Booth
    Member
    Posted 3 years ago #

    the url is http://www.boothstars.com.

    I can't find the config file. I can find the The message I seems to be telling that there isn't one. I can only track down the wp-config-sample.php

  15. mikey1
    Member
    Posted 3 years ago #

    Hi again, the config message comes up when you go to boothstars.com/blog
    whren i just go to boothstars.com i get a screen with hacked written at the top and a graphic MR. Mebo, is that anything to do with you ?
    What link do you normally use to log in.

  16. mikey1
    Member
    Posted 3 years ago #

    hi again, well the opening page with hacked on it is a fake the graphics are being sourced from a freesite.
    Have a look in your root directory to see if there is an index.html in there, if there is, delete it, somoone clearly has the ability to upload to your server. you need to change all passwords eg ftp etc immediately.
    PS. If your config file has gone, then the intruder could have a copy with your details you'll need to change database password also.

  17. Phil Booth
    Member
    Posted 3 years ago #

    Yes, someone has hacked into my site. I can't login to my WP admin. So, I can't change any passwords until I can. What I'm trying to find out is how to get in there.

  18. Phil Booth
    Member
    Posted 3 years ago #

    Do you know how to change the database password?

  19. mikey1
    Member
    Posted 3 years ago #

    Hi, you mentioned earlier ou have a tech expert, the wordpress admin password can be easily changed through phpmyadmin in the users table, if you have Cpanel or Plesk the database password can be changed there.
    Once you're secure, you can check through your blog to see if any other changes have been made, and cleaned if necessary, then an upgrade is essential, I hope it gets resolved for you soon, also have a quick look for that index.html file, the intruder may just be trying to prove he can get in. good luck.
    mike.
    http://codex.wordpress.org/WordPress_Versions

  20. mikey1
    Member
    Posted 3 years ago #

    I can't find the config file. I can find the The message I seems to be telling that there isn't one. I can only track down the wp-config-sample.php

    if you have access to the details you need to edit your configsample file edit the file with notepad and save it as wp-config.php then upload it to the blog directory, once wordpress can find this, you should be able to log in.
    mike.

  21. Phil Booth
    Member
    Posted 3 years ago #

    That's exactly what I was trying to do when we first starting chatting 5 hours ago. Things are worse now. My control panel logon doesn't work either.

  22. whooami
    Member
    Posted 3 years ago #

    then contact your host.

    you were hacked. google even sees it.

  23. whooami
    Member
    Posted 3 years ago #

    <meta name="generator" content="WordPress 2.1" />

    http://wordpress.org/search/hacked?forums=1

  24. mikey1
    Member
    Posted 3 years ago #

    Good morning all, well I'm amazed to see the site back up and running, would love to know what you did, it was a long haul last night but at least its running, so you can sort out any problems, and PLEASE upgrade.
    mike.

  25. Phil Booth
    Member
    Posted 3 years ago #

    The site is back up, but I can't log on to wordpress. wp-admin opens up my website homepage and not the admin panel of WordPress.

    It appears that the wp-admin file has been deleted.

    Does anyone understand this problem and know a remedy. Thanks

Topic Closed

This topic has been closed to new replies.

About this Topic