Hacked AGAIN!

PamdV
(@pamdv)

11 years, 5 months ago

I am very frustrated. This is the 3rd or 4th time our church’s website has been hacked in a year. I just read that someone else has been hacked with the same message less than 24hrs ago – white screen with “hacked by hacker” on it.

We only run a few basic plugins (WP-Cycle and weather). No blogging. Is hacking something we can expect frequently? If so we may have to move from WordPress. We do back up our files. Our password is a strong one.
We use Studio Press.

I am learning as I go so what specifically can I do to stop the hacking?

P

Viewing 8 replies - 1 through 8 (of 8 total)

Krishna
(@1nexus)

11 years, 5 months ago

You are hacked again because of leaving loopholes and codes of the hacker in your site.
Hope these may help:
http://wordpress.org/support/topic/exploits-and-godaddy?replies=28#post-1065779
http://codex.wordpress.org/Hardening_WordPress

Thread Starter PamdV
(@pamdv)

11 years, 5 months ago

Thank you. I will go through the list. I know that because of the first 2 hackings we rebuilt our website from scratch and have been backing it up. The last time HostPapa restored it from our backup. Everything is up to date.
I must be missing something.

The Hack Repair Guy
(@tvcnet)

11 years, 5 months ago

You are apparently missing something after the rebuild of your site.
May be time to hire and expert to finish the job.

Hackers are good at hiding back door scripts, which enable them to re-hack your site on a whim. It’s more likely your re-installation still harbors back door scripts or even outdated scripts of another sort. An expert would go through your site with a proverbial fine tooth comb and end your pain in a single day.

esmi
(@esmi)

11 years, 5 months ago

@the Hack Repair Guy: Please stop encouraging people to hire someone like yourself when they haven’t yet been given all of the resources they need to help them sort the problems out themselves. These forums are not for soliciting work

@pamdv: See:
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

esmi
(@esmi)

11 years, 5 months ago

@pamdv: You might also want to consider switching hosts. You’re not the only person on HostPapa who seems to have been hacked more than once recently. At least based on some of the topics I been reading here recently.

mvandemar
(@mvandemar)

11 years, 5 months ago

@esmi – HostPapa is trying to blame WordPress for their insecurities:

http://smackdown.blogsblogsblogs.com/2012/11/14/hacked-on-hostpapa-or-netregistry/

(hint: it’s not a WordPress issue)

Thread Starter PamdV
(@pamdv)

11 years, 5 months ago

The suggestion of switching from Hostpapa was given to me yesterday by the person who is wordpress knowledgable and helped us get started with this website. They have never had a hack yet.
Thank you for all the input that has been given to me on this issue. Much appreciated.

esmi
(@esmi)

11 years, 5 months ago

That’s good advice based upon the info in this post.