• Hi there, i’ve got a wordpress installation installed on a cPanel web server layout. It is wordpress version 4.1.

    The website was recently hijacked as the original developer filed to keep the site up to date. I’ve done my best to restore it fully to its original functionality and design but I’m having a weird issue with .htaccess.

    The issues is that whenever I type /<any word or phrase> it comes up with the “Choose File” and upload option in an index file. The uploader works perfectly meaning there is still a vulnerability here somewhere. If I remove the .htacess file it stops it from loading the loader and just loads the words “nothing here” instead, fine but then the website stops working obviously.

    Any suggestions at what the problem could be?

Viewing 3 replies - 1 through 3 (of 3 total)
  • whenever I type /<any word or phrase> it comes up with the “Choose File” and upload option…

    If I remove the .htacess file it…just loads the words “nothing here”

    Check the status of index.php to be absolutely certain it is the original WordPress file, then try both nothing at all in .htaccess and with this to see what happens:

    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ - [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>
    
    # END WordPress

    http://codex.wordpress.org/htaccess

    Thread Starter Rajeedo

    (@rajeedo)

    Hi there, thank you for your response.

    I have already tried this and unfortunately it hasn’t fix the problem.

    However noticing. If i go to permalink within the wordpress admin and change the option from Post Name to default, the issue is not there. However this isn’t a resolution as the website needs to use the post name option for SEO purposes.

    Would it be worth installing a fresh copy of WordPress?

    If i go to permalink within the wordpress admin and change the option from Post Name to default, the issue is not there…

    Would it be worth installing a fresh copy of WordPress?

    I think no harm could be done by deleting and replacing all /wp-folders/ and wp-files.php other than /wp-content/ and wp-config.php (a manual re-installation) to be sure nothing there is corrupted, but permalinks are handled in your database and I do not know how to fix those. There are certainly other people here who do know how to do that, so here is a summary of your situation for anyone to consider:

    whenever I type mydomain.com/<any word or phrase> it comes up with the “Choose File” and upload option in an index file. The uploader works perfectly meaning there is still a vulnerability here somewhere. If I remove the .htacess file it stops it from loading the loader and just loads the words “nothing here” instead…

    If i go to permalink within the wordpress admin and change the option from Post Name to default, the issue is not there. However this isn’t a resolution as the website needs to use the post name option for SEO purposes.

    Edit: If you wish, you could start a new thread mentioning your permalinks problem in its title, but resolving your permalinks issue is not going to remove whatever intrusion would still be in place even if you do get your permalinks fixed to where they always skip past it.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Directory Redirect issues’ is closed to new replies.