WordPress.org

1. vicbomb5
   Member
   Posted 4 years ago #

   So we were hacked today, and upgraded to WP 2.5 as many stated it would fix our problem.

   We have one problem remaining following the upgrade....

   http://news.google.com/news?hl=en&ned=us&q=site:dbtechno.com&ie=UTF-8&scoring=n

   If you go to there, that is the google news trackers picking up the stories posted by the hacker. The stories redirect to a different site other than dbTechno.com.

   How do I get rid of this redirect? Where could it be?

   The original problem links were in the footer.php file.

   Thanks,
   Vic
   dbTechno.com

2. whooami
   Member
   Posted 4 years ago #

   ftr,

   as many stated it would fix our problem.

   You may have gotten advice from elsewhere on this, admittedly, but since I was one the responders to your other threads on this (it was removed as a duplicate) -- no-one here said emphatically that it would fix your problem. What you were told here, was to upgrade.

   I think we are tiring of people that seemingly arent responsible web masters coming here after a site they have neglected for months is hacked. I also feel that that irritation/tiredness (call it whatever you like) is justified. Consequently, we are starting to reply to these people with "upgrade" and nothing else.

   I just wanted to clarify the responses you got on here, so that you do not come back and say. I was told upgrading would fix it by you but blah blah.."

   Securing a previously exploited site may take more than simple upgrade. For more on that, you can search the forums here. In the upper right hand corner is a box -- it works.

   --

   As for whats in Google. Ask them.

3. vicbomb5
   Member
   Posted 4 years ago #

   I have no issue at all with you guys growing tired of this type of stuff. I'm new to this though, still learning.

   Is there anything in particular on the forums I should search for? I have been searching for awhile and have yet to find anything.

   -Vic

4. whooami
   Member
   Posted 4 years ago #

   prolly want to start here:

   http://wordpress.org/search/hacked?forums=1

5. Nicarlo
   Member
   Posted 4 years ago #

   Hey Whooami,

   Hope you are in a better mood this morning
   thanks for providing a link this time, it was much more useful

   perhaps you could help me or point me into the right direction for this one.
   There are redirecting links like the example provided below that are still being pointed to an unwanted/spammer website. My question would be how would i go about removing this ? I am currently going through the mysql Database but cant find any records for this.
   EXAMPLE: http://www.domain.com/?p=84350

   Is it possible that they injected this into an actual file ?
   If so which file is most likely for this to have happened too ?

6. Jeremy Clark
   Moderator
   Posted 4 years ago #

   If random links are being redirected from you site then I'd look in the .htaccess and look for any redirects.

7. Nicarlo
   Member
   Posted 4 years ago #

   thank you Jeremy for your reply.

   I have checked the htaccess and this is what i have `
   # -FrontPage-

   IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*

   <Limit GET POST>
   order deny,allow
   deny from all
   allow from all
   </Limit>
   <Limit PUT DELETE>
   order deny,allow
   deny from all
   </Limit>
   <IfModule mod_rewrite.c>
   RewriteEngine On
   RewriteBase /
   RewriteCond %{REQUEST_FILENAME} !-f
   RewriteCond %{REQUEST_FILENAME} !-d
   RewriteRule . /index.php [L]
   </IfModule>
   `
   Is there something i should be concerned about with this code ?

8. Nicarlo
   Member
   Posted 4 years ago #

   anyone have any suggestions ?

   little update:
   I have cleared out the injections that were in the database. I quickly looked at some of the php files and there doesnt seem to be anything that shouldnt be there.

   If I understood a bit more how the redirect works and where they are stored and generated this would help me get to the end of the problem.

   Thank you

Topic Closed

This topic has been closed to new replies.