Tried to secure site and lost access to dashboard

  • Resolved Jules Ober

    (@jules-ober)


    11 years, 3 months ago

    Hi – I was reading an article about how easy it is for hackers to get into WP and had noticed that many of the ip accessing my site were in Russia, so I went through WP tutorials to try to better secure my site. This was yesterday and today the site is viewable, but I can’t access my dashboard (message says Page Not Found)
    I was gettting lots of spam, so activated AKISMET.
    I tried password protecting my admin folder, but this stopped the site from working, so removed the password.
    I changed permissions on wp-admin, & wp-includes to make them writable by me only.
    I installed MVIS Security Center (Plugin) and started going through their recommended changes.
    I have mucked things up somehow but don’t know where!! Help!
    Wordpress is easy enough until you get into stuff like this. Aaaargh

Viewing 6 replies - 1 through 6 (of 6 total)
  • WP Libra

    (@wpbum)

    11 years, 3 months ago

    I would start by deactivating all plugins manually via FTP and try again.

    Thread Starter Jules Ober

    (@jules-ober)

    11 years, 3 months ago

    Hi Aaron
    I de-activated all plugins via Cpanel but still no joy.

    shadez

    (@shadez)

    11 years, 3 months ago

    could be the password protection thing you did.. what exactly did you do? any permission changes?

    Thread Starter Jules Ober

    (@jules-ober)

    11 years, 3 months ago

    I right clicked on my wp-admin folder and selected password protect. I went through the process of adding a password, but then my site was inaccessible, so I removed the password via the same route and the site was working again.

    I changed permissions on wp-admin, & wp-includes to make them writable by me only.

    I used the MVIS security Centre plugin to start to address some of the security issues it had detected. I think I only changed the permissions above. I can’t quite remember and can’t access the MVIS dashboard now that I’m locked out of my site’s backend.

    shadez

    (@shadez)

    11 years, 3 months ago

    check if file permission of /wp-admin is set to 755 and all files within (esp index.php) are set to 644.
    does /wp-login.php take you to dashboard instead of accessing via /wp-admin?

    Thread Starter Jules Ober

    (@jules-ober)

    11 years, 3 months ago

    THANKS! The permissions for /wp-admin were 754 instead of 755. All fixed.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Tried to secure site and lost access to dashboard’ is closed to new replies.