WordPress.org

1. WP Monkey
   Member
   Posted 5 months ago #

   I think our site has been hacked, since a couple of times a day posts titled "Untitled_9" or "Untitled_10" show up on the site. They do not have correct IDs and dates in the database, and they look to be created by users who were not logged into the site that day. We keep deleting them and have done a lot to try to stop them, but they keep coming back.

   I'm worried that this is the first step in a hack and this business site could go down and effect my client. Anyone else see this?

2. thisisandymoore
   Member
   Posted 5 months ago #

   Do you have anything to stop hacking on your site? There are various systems you can buy at reasonable cost.

   If you are interested in some, please let me know...

   I have a couple in mind that seem very effective.

   Best Wishes

   Andy Moore

3. WP Monkey
   Member
   Posted 5 months ago #

   I found the following in our .htaccess file:

   AuthName "<sitename>"
       AuthUserFile "/home3/timbero8/.htpasswds/public_html/<sitename>/passwd"

   For this forum I replaced our actual sitename with <sitename>.

   I deleted these lines but also noticed that this code was repeated twice in the .htaccess file as well:

   # BEGIN WordPress
   <IfModule mod_rewrite.c>
   RewriteEngine On
   RewriteBase /
   RewriteRule ^index\.php$ - [L]
   RewriteCond %{REQUEST_FILENAME} !-f
   RewriteCond %{REQUEST_FILENAME} !-d
   RewriteRule . /index.php [L]
   </IfModule>
   
   # END WordPress

   Should I delete the second one as well?

Reply

You must log in to post.