Sites Hacked – Looking For Solution

  • wordpressfan

    (@wordpressfan)


    17 years, 9 months ago

    I discovered multiple sites hacked, replacing my site with this message:

    By BeyazKurt | Albanian C0der

    Bypassed ßaby 🙂

    Changing themes does not prevent this. I can still get into the admin section and the domain registration and ownership is intact.

    What are my options to resolve this? Thanks.

Viewing 1 replies (of 1 total)
  • wiredgeek

    (@wiredgeek)

    17 years, 9 months ago

    After doing some research on this issue it looks like the hacker simply replaced the index.php file from within the root directory of the websites.

    Solution:
    1) Replace the index.php file with a backup
    2) Change your password for your website.
    (netfirms.ca seems to have been a webhost that has been targeted for this hack because their DEFAULT login is the website domain)
    3) Also set CHMOD 444 to the index.php which will limit the hacker from writing to the file.
    4) If you are using Joomla or similar find your configuration.php file (typcially found in site root directory). MAKE A BACKUP BEFORE YOU EDIT!!! Open this file up with WordPad (ONLY not notepad)… locate the line that says:

    var $secret = ‘ltmhCsrG7E8lemQS’;

    (or something similar)

    Change this string of charecters because if you leave it default hackers will target you first.

    Save the file and upload back to your server.

Viewing 1 replies (of 1 total)

The topic ‘Sites Hacked – Looking For Solution’ is closed to new replies.

Tags