Support » Fixing WordPress » My Website got hacked shows "This site may be hacked."

  • My website IndianRamp.com shows This site may be hacked in Google and my traffic is reduced from 2000 visits to 100 visits per day.

    I see my website is redirecting to third party website and porn. When I checked in Google Webmaster tools for Search console 3 pages with hacked injected content.

    See the attached screenshot (https://s3.postimg.org/m6jhdkq6b/SPAM.png)

    Please help me recover my site and get back my traffic too.

Viewing 15 replies - 1 through 15 (of 32 total)
  • Moderator Steve Stern

    (@sterndata)

    WordPresser, Third Class

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    trying it

    I tried removing all the plugins and replace my wp-admin and wp-inclues folders too, i m getting an error now my website is not opening.

    Moderator Steve Stern

    (@sterndata)

    WordPresser, Third Class

    Did you keep wp-config.php?

    yes wp-config file is still there

    what should I do now, please help!

    Moderator Steve Stern

    (@sterndata)

    WordPresser, Third Class

    Let’s try enabling wp_debug and wp_debug log and see if anything shows up in wp-content/debug.log

    Home page or admin is giving this error

    Fatal error: Call to undefined function apply_filters() in /home/content/56/9117656/html/wp-includes/load.php on line 317

    Moderator Steve Stern

    (@sterndata)

    WordPresser, Third Class

    It seems like you may be missing some WP files. Way back when, you said

    I tried removing all the plugins and replace my wp-admin and wp-inclues folders too, i m getting an error now my website is not opening.

    Did you actually replace all of the WP files with a fresh download from wordpress.org?

    yes, i replace only folder wp-admin and wp-include

    Moderator Dion Hulse

    (@dd32)

    Lead Developer

    In addition to replacing the wp-admin and wp-includes folders, you also need to copy over ALL of the files that sit in the base directory, for example the updated wp-settings.php needs to be copied.

    The only two things you should NOT touch, are the wp-content directory and your wp-config.php file.

    I tried doing that too, it seems its not working, what should I do now to bring my website up and running

    Please don’t bump posts or you may incur the wrath of an admin 🙂

    What you’re not telling us is EXACTLY what is happening? There is no point saying “it’s not working” – we need to know why! What errors are you getting?

    So, can we just check the status of your install? The folders wp-includes and wp-admin are new, as are the files sitting underneath. You left wp-content alone? What about the root files? Are they all new, except wp-config.php?

    Also, any chance of giving us a URL to look at?

    The more information you can give us the better.

    Sure,

    I already gave the URL in the title.

    My website was hacked and showed the status in Google.

    I wanted to get rid of the messages which was effecting my website visitors.

    Downloaded the fresh copy of wordpress from the WP site and I tried replacing the folder wp-include and wp-admin and the root files too except wp-contetn and wp-config.php

    I removed all the plugins too.

    But my website now goes to blank page even the admin page,

    First I need to bring my website to normal stage. How can I do that

    Then make my website secure or remove the message “This site may be hacked” in Google Search Engine.

    Please suggest

    Ok, you’re getting a 500 error. Because you left the wp-contents folder in place, this may be due to an issue with a theme or plugin. Could you rename your plugin folder and also the folder of your active theme (not the theme folder in total, as we need your theme to go back to a default one, which I assume you’ve left installed)?

Viewing 15 replies - 1 through 15 (of 32 total)
  • The topic ‘My Website got hacked shows "This site may be hacked."’ is closed to new replies.