Hacked index.php - admin and blog won't load (8 posts)

  1. Zypher023
    Posted 3 years ago #

    Unfortunately my blog was hacked - mainly my index files of all my domains (not just my blogs). My host has no backup and I am unable to access the admin pages to login, but my WordPress iPhone app still allows me to access my blog posts, so I know the content is still in tact somewhere in there.

    The issue I'm having, that I'm not finding help with on the 'fix your WordPress hack' sites, is that I can't access my admin page. If you go to http://www.aglutenfreeendeavor.com/index.php it loads the code, and not the page, same with /wp-admin/.

    I am not familiar enough with PHP to know what's wrong with it. Is there anyone that has experienced this? All the hackers did was delete my default domains files, and under the other domains and blogs, they deleted the index file and replaced it with their names. It wasn't a huge deal but I have no idea how to fix it.

    Unfortunately my last blog backup was in August so I am SOL if I can't get this sorted out (short of copying and pasting the info from each post through my iPhone app into a notepad - yikes). I did have an old index.php file that I uploaded, but I kept the one from the hack also. Somehow the hack did cause all my domains to default to showing the directory instead of showing the index pages - I don't know what the deal is with that and my host seems to be stupid and tells me it should be.

    Any help would be great. This is a 3rd party install through Softaculous. Currently I have my domain re-directing to a temporary 'this site is down' type page, but I can turn that off it will help anyone figure this out.

    Thanks ahead of time for the help.

  2. Zypher023
    Posted 3 years ago #

    For added info: They all looked like this: http://static.remote-galaxy.com/

  3. Loading php code as text in the browser instead of executing the code means your host has disbaled php.

    my host seems to be stupid

    They are. Find a new host. Recommended WordPress Web Hosting

    Your database with all content should still be OK, unless the host deleted it.

    In order to fully clean the hack, see FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex and change all passswords. Scan your own PC.

  4. Zypher023
    Posted 3 years ago #

    I discovered the phpmyadmin and have exported as much as I can. My content appeared when I exported a Word file - do you think I can do a fresh install and reload the content?

    I've checked out this one http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/ from my searches but I don't see how to get your posts back onto the site. I was just a little confused overall with that site (I think my brain is fried from trying to sort this all out).

  5. Zypher023
    Posted 3 years ago #


    I got the PHP to load again and my blog loaded. http://www.aglutenfreeendeavor.com From here I would love to do a clean install without losing everything I've done to this theme and with plugins, etc. It sounds like the smackdown link has me starting from scratch and if no - I am confused. Any help? Is there a tutorial out there? Do I have a choice?

  6. Replace all core WP files, folders and plugins except your theme, wp-content/uploads and wp-config.php. Import the database via phpmyadmin. Reset permalinks.

  7. Zypher023
    Posted 3 years ago #

    Thank you for your help. What do you think is the best way to do this? Save those folders, do a fresh install and re-upload and restore database?

  8. You don't have to do a "reinstall." Upload the fresh WP files the folders. Only export/import the database if you are changing hosts.

Topic Closed

This topic has been closed to new replies.

About this Topic