Phil Booth
Member
Posted 3 years ago #
Urgent situation!
My site has been hacked into. I get the following message:
There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file.
Hi, where is your site, url?
have you installed it, the message you're seeing is normally on installation, if you have not added a config file.
mike.
Phil Booth
Member
Posted 3 years ago #
My site has been up for 2 years. It was hacked into early today.
Thanks---Phil
Phil Booth
Member
Posted 3 years ago #
Hi Mike--Are you still there? Or are you busy??---Phil
Hi Phil, yep still online, had to log out for a while.
mike.
Phil Booth
Member
Posted 3 years ago #
I'm following some instructions that WPress offered concerning the:
wp-config-sample.php
I don't want to change anything and make things worse though. My tech expert is busy on another job for someone else. I hope I can get him on this soon, but in the meantime I'm having a look myself.
Phil Booth
Member
Posted 3 years ago #
By the way, Mike. Are you familiar with this problem from previous experience? Thanks--Phil
Hi sgain,
I'm following some instructions that WPress offered concerning the:
wp-config-sample.php
what were the instructions? More importantly, why do you think you've been hacked?
mike.
Phil Booth
Member
Posted 3 years ago #
Hi--
I have no idea why I've been hacked. Does anyone know why hackers hack?
http://codex.wordpress.org/Editing_wp-config.php
I'm looking at the instructions given on the above link...
Hi, I only ask because so far you've said nothing about any hacks on your site, any code inserted anywhere etc.
You say you site has been up and running two years, why are you editing the config.php file.
(I know 1000 questions, but its best to know ) LOL
mike
PS. Don't tell me, you're in the process of upgrading.
sorry I'm not being sarcastic.
Phil Booth
Member
Posted 3 years ago #
Hi--I'm not editing anything yet. The reason I'm looking into that is because, as mentioned in my first post above, I got the following message when logging onto WordPress:
"There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file."
Are you using ftp, check to see if there is a config file, if there isn't your site won't work anyway.Whats your url by the way.
This message is wordpress preparing to install.
"There doesn't seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn't work for all server setups. The safest way is to manually create the file."
Phil Booth
Member
Posted 3 years ago #
the url is http://www.boothstars.com.
I can't find the config file. I can find the The message I seems to be telling that there isn't one. I can only track down the wp-config-sample.php
Hi again, the config message comes up when you go to boothstars.com/blog
whren i just go to boothstars.com i get a screen with hacked written at the top and a graphic MR. Mebo, is that anything to do with you ?
What link do you normally use to log in.
hi again, well the opening page with hacked on it is a fake the graphics are being sourced from a freesite.
Have a look in your root directory to see if there is an index.html in there, if there is, delete it, somoone clearly has the ability to upload to your server. you need to change all passwords eg ftp etc immediately.
PS. If your config file has gone, then the intruder could have a copy with your details you'll need to change database password also.
Phil Booth
Member
Posted 3 years ago #
Yes, someone has hacked into my site. I can't login to my WP admin. So, I can't change any passwords until I can. What I'm trying to find out is how to get in there.
Phil Booth
Member
Posted 3 years ago #
Do you know how to change the database password?
Hi, you mentioned earlier ou have a tech expert, the wordpress admin password can be easily changed through phpmyadmin in the users table, if you have Cpanel or Plesk the database password can be changed there.
Once you're secure, you can check through your blog to see if any other changes have been made, and cleaned if necessary, then an upgrade is essential, I hope it gets resolved for you soon, also have a quick look for that index.html file, the intruder may just be trying to prove he can get in. good luck.
mike.
http://codex.wordpress.org/WordPress_Versions
I can't find the config file. I can find the The message I seems to be telling that there isn't one. I can only track down the wp-config-sample.php
if you have access to the details you need to edit your configsample file edit the file with notepad and save it as wp-config.php then upload it to the blog directory, once wordpress can find this, you should be able to log in.
mike.
Phil Booth
Member
Posted 3 years ago #
That's exactly what I was trying to do when we first starting chatting 5 hours ago. Things are worse now. My control panel logon doesn't work either.
then contact your host.
you were hacked. google even sees it.
<meta name="generator" content="WordPress 2.1" />
http://wordpress.org/search/hacked?forums=1
Good morning all, well I'm amazed to see the site back up and running, would love to know what you did, it was a long haul last night but at least its running, so you can sort out any problems, and PLEASE upgrade.
mike.
Phil Booth
Member
Posted 3 years ago #
The site is back up, but I can't log on to wordpress. wp-admin opens up my website homepage and not the admin panel of WordPress.
It appears that the wp-admin file has been deleted.
Does anyone understand this problem and know a remedy. Thanks