WordPress.org

1. Dr Tester
   Member
   Posted 3 years ago #
   

   Hi
   I'm building a blog using wordpress,
   Every so often (week or so) a random article about wordpress appears in my blog .
   I dont think its hacked , as it seems to be a generic post about wordpress by someone named "jane wells"
   Maybe its some kind of setting thats allowing automatic posts about wordpress, i am really not sure.
   Can someone please enlighten me

2. Rev. Voodoo
   Volunteer Moderator
   Posted 3 years ago #
   

   I don't think there is a setting that would allow that.

   You could be hacked...with a link to your site we could try to check that.

   Do you allow users to sign up? If so, at what level? This is all stuff you can check in your settings. Do you have a user with that name in your users list?

3. Dr Tester
   Member
   Posted 3 years ago #
   

   i am not sure if i can post the link as its an affiliate marketing site, and i am not trying to promote myself here
   the user seems to be a "jane wells" who says their site is
   http://wordpress.org/development/

   i will go ahead and remove their profile,

4. Rev. Voodoo
   Volunteer Moderator
   Posted 3 years ago #
   

   yeah I'd remove the user, and then adjust the default level of new users to 'subscriber', unless you want people to be able to post

5. Dr Tester
   Member
   Posted 3 years ago #
   

   but their status was "subscriber" so i am not sure how their posts just displayed?

6. Dr Tester
   Member
   Posted 3 years ago #
   

   well i removed this "jane wells" but 2 hours later she was back with 2 old posts.
   how can i disable subscribers from becoming subscribers?

7. Rev. Voodoo
   Volunteer Moderator
   Posted 3 years ago #
   

   You can disable people from signing up in your settings. Uncheck the 'anyone can register' setting

   However, I think your issue may be bigger than that. If you have a user doing things beyond their role, and reappearing.....I'd be worried about a hack

8. Dr Tester
   Member
   Posted 3 years ago #
   

   anyone can register was never an option with me,
   I will delete all users and change admin password now

   Thanks for being so helpful!

9. Rev. Voodoo
   Volunteer Moderator
   Posted 3 years ago #
   

   Read through some of this stuff. Deleting users and changing passwords won't do much good if you've been hacked. The problem usually goes deeper

   http://codex.wordpress.org/FAQ_My_site_was_hacked
   http://ocaoimh.ie/did-your-wordpress-site-get-hacked/
   http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
   http://www.snipe.net/2010/01/when-wordpress-gets-hacked/

   My Experiences with being hacked:
   http://www.rvoodoo.com/2010/02/the-dreaded-base64-wordpress-hack-and-other-hacks-too/

   And when you're done:
   http://codex.wordpress.org/Hardening_WordPress

10. Dr Tester
    Member
    Posted 3 years ago #
    

    once again jane wells is back, even after i removed her and changed my password
    now i will look through my plugins, could they be vulnerable?

11. Rev. Voodoo
    Volunteer Moderator
    Posted 3 years ago #
    

    Anything is a possibility. The links I posted are quite valuable, they will teach you how to find the source.

Topic Closed

This topic has been closed to new replies.