WordPress.org

Forums

my blog is being attacked by some script (13 posts)

  1. neteater
    Member
    Posted 5 years ago #

    hi i am in big trouble . Whenever i am making a post a link saying best virus protection is added automatically. Kindly help me what to do my url is studentlife.co.in

  2. esmi
    Forum Moderator
    Posted 5 years ago #

    That sounds like a hack. Try:

    - deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

    - switching to the Twenty Ten theme to rule out any theme-specific problems.

    Some other useful links:
    http://codex.wordpress.org/FAQ_My_site_was_hacked
    http://wordpress.org/support/topic/268083#post-1065779
    http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
    http://ottopress.com/2009/hacked-wordpress-backdoors/

  3. neteater
    Member
    Posted 5 years ago #

    yes it is theme hack .gng to read article sugstd by u, may find some sol. Thamk u

  4. mosco
    Member
    Posted 5 years ago #

    If you don't mind can you share what version of wordpress you were running when you got hacked?
    What is the code that is being inserted? Is it a <script src tag at the bottom of each post?
    We were also getting hacks on wordpress 3.0.1, just upgraded to 3.0.2 but not sure yet if that resolves the issue.

  5. neteater
    Member
    Posted 5 years ago #

    my wp is v3.0

  6. esmi
    Forum Moderator
    Posted 5 years ago #

    That's now 2 versions behind the current version. The best protection against hacks is to always keep WordPress up to date.

  7. neteater
    Member
    Posted 5 years ago #

    ok just updated and problem gone

  8. neteater
    Member
    Posted 5 years ago #

    problem is back again

  9. mosco
    Member
    Posted 5 years ago #

    can you describe the hack in more detail, does the code get inserted inside all your posts? or do your wordpress files get infected? what does the hack code look like?

  10. neteater
    Member
    Posted 5 years ago #

    /*

    */
    this is the code remove spaces and star

  11. neteater
    Member
    Posted 5 years ago #

    <ul><li><a href="http://protectionvirus.info">Best Virus Protection</a></li></ul>

  12. neteater
    Member
    Posted 5 years ago #

    can plugin co zthe problem i have 40+ plugins installed

  13. mosco
    Member
    Posted 5 years ago #

    could be a plugin, or after they hacked you they might have left behind a hack inside one of the plugin files. Check that you don't have hacked entries in your wp_options table and that your plugins don't have any hidden base64 or eval code snipets in them. usually that's where the hacks are hidden.

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.