posts showing up via .htaccess

I checked my google analytics and noticed that posts were being viewed that don’t exist on my site. I’m able to go to them but they were never actually made. I’m guessing that someone broke into my site and uploaded some files.

I found out, after viewing those created pages and checking the files on my server, that there was an .htaccess file now there. I didn’t think that was supposed to be there so I opened it and found some rewrites. This is the entire text:

# wordpresshtaccess
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ /wp-includes/js/swfupload/coupeau.php?q=$1 [L]
</IfModule>

I then noticed the coupeau.php file which was in the same folder. All of the files in there were probably bad. When I deleted the .htaccess file the post was no longer there when I went to that link.

I just wanted to see if anyone else had this issue or I’m just letting everyone else know this is a potential issue that I would have never known existed had I not set up a google analytics for that website.

My guess is that my password sucks. A lesson for everyone.