Support » Plugin: iThemes Security (formerly Better WP Security) » Can your plugin solve my issue ?

  • Hi, Its a 14 seconds video which explained my sites issues.
    When i open my sites , it is being redirected to another link.
    Hosting guys says its due to ‘corrupt .htaccess file and SQL injections etc.’
    Hosting is namecheap.
    This has been happening with all of my websites again and again in last month. I have 15 sites and this issue has happened with my sites many times.
    I ran scanner many times, read reports and cleared my cpanel many times, one by one.. But still i don’t know how the hell this issue is happening ?
    Every time I have to come to hosting support and they do something like disbale htacess file or restore default file and they fix one site,. And meanwhile fixing this , another site breaks down.
    SO My question is
    Can your plugin stop this ?
    Stop these issues or stop breaking my sites again and again ???

    Please reply me with your expertise and advice

    Thank you!!!

Viewing 4 replies - 1 through 4 (of 4 total)
  • No, there is no security plugin that will be able to resolve this issue.

    +++++ To prevent any confusion, I’m not iThemes. +++++

    @waqar111,

    We agree with @nlpro.

    While we no longer use iThemes Security, the following may fix your issue:

    Procedure:

    (1) Select one of your websites and perform a malware scan using the following scanners: Sucuri SiteCheck, VirusTotal, and SiteGuarding (this last one detects Base64 malware).

    (2) If any of the above tools detect malware on your site, contact your host and ask them to perform their own malware scan to reconfirm the finding(s). If any detected, well, you know what to do. A major malware cleanup is required.

    (3) If no malware is detected, create a backup of your selected website.

    (4) Deactivate all of your non-essential plugins.

    (5) Replace your website’s current htaccess file with a clean WP htaccess file.

    (6) Clear all cache (site, server, and CDN level)

    (7) Logout/login into your website.

    (8) If your problem is solved, activate each plugin (one by one) and retest your site. If all is OK, then the issue is with your old htaccess file. If not, one of your plugins is causing the issue. Make sure you’re not using NULLED plugins.

    (9) If the above is solved (as noted), you will have to recreate your htaccess file based on the offending htaccess code.

    (10) After cleaning up your website(s), install iThemes Security to secure your website.

    Note: Consider installing SG Security instead. It was released recently. We use it. Gets the job done, effectively!

    Best wishes!

    Thread Starter waqar111

    (@waqar111)

    Hello @jetxpert

    Thank you for your kind suggestions

    I got these results after scanning

    https://i.imgur.com/Lk2XopW.jpg

    https://i.imgur.com/gx7GM8o.jpg

    I dont think there is some big issues.

    What plugin i should install now ?

    @waqar111,

    Based on results obtained, and as @nlpro stated, no security plugin will be able to fix your issue. Your website may be infected.

    Here’s what we recommend before hiring a malware removal company like Sucuri or your host, Namecheap:

    (1) Perform a malware scan using your host’s malware scanning tool. You should also ask your host to run their own malware check — it’s in their best interest! Results?

    (2) Perform a plugin conflict check. Very important. A plugin or custom code may be causing your issue. Once you identify the conflicting (or offending) plugin, contact the plugin’s author for a solution or delete it. Note: If you installed a NULLED plugin, it may have injected malware (or similar) into your website so this check may not help much.

    (3) Your website’s Directory Listing is enabled (exposed). You need to disable it. Ask your host to disable it. Your website is running on LiteSpeed. Here’s how they can do that.

    (4) Adjust and/or clean your website, then re-run the above malware check tools until the results are free from issues. Once done, you can install iThemes Security or SG Security. Of course, nothing is stopping you from installing either one at any time.

    (5) If you can’t seem to identify the issue(s), then hire a developer and/or malware removal service.

    Best wishes!

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.