Title: Sidebar disappeared AND “webadmin.php” appeared Last modified: August 19, 2016 --- # Sidebar disappeared AND “webadmin.php” appeared * [srselby](https://wordpress.org/support/users/srselby/) * (@srselby) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/) * Weird things have happened to my blog. I’m using “Tranquility White” theme, and it’s been great until now. I wrote a post today, and when I went to see how it looked on the blog itself, I noticed that: 1) “webadmin.php” shows up on the top 2) the sidebar has disappeared 3) all my images are gone (there are teeny icons in their place) I haven’t updated to WordPress 2.8.6 yet… could this be the problem? And on that note, I’m at a loss on how to backup my database as is recommended to do before updating. I’ve tried all the suggestions in the Codex, to no avail. If anyone can recommend an “easy” way to do this, I’d appreciate it. (I’m not a techie person..) Thanks, Sheila Viewing 11 replies - 1 through 11 (of 11 total) * [Peter Boosten](https://wordpress.org/support/users/pboosten/) * (@pboosten) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301220) * > I haven’t updated to WordPress 2.8.6 yet… could this be the problem? * depends on the version you’re running. Maybe you have been own3d? * Peter * [Gerald Yeo](https://wordpress.org/support/users/geraldyeo/) * (@geraldyeo) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301222) * ``` 1) "webadmin.php" shows up on the top ``` * Do you mean that going to the homepage you get redirected there? * On that note, WordPress doesn’t even have a webadmin.php file… * [kellymar](https://wordpress.org/support/users/kellymar/) * (@kellymar) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301228) * Prior to making that last post, had you installed any new widgets or done anything differently? Normally, I will change one thing at a time and then make certain that my site is okay before moving on. I’m not familiar with Tranquility, but does it use jQuery? If so, there could also be a conflict between jQuery and a widget. * Hope this helps. * Thread Starter [srselby](https://wordpress.org/support/users/srselby/) * (@srselby) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301282) * Thanks for the replies.. If it helps at all to take a look at my blog, it’s: otminteriors.com/wordpress/ * pboosten – I’m running WP 2.5.1. What do you mean by owned? Hacked? * geraldyeo – no redirection, just the text “webadmin.php” and a box that looks like a search box. * Kellymar – I hadn’t installed anything new. I downloaded WP 2.8.6 to my laptop, but didn’t install it. And sorry, don’t know what jQuery is. I’m not a techie, so I’m not up on all the software, etc. * Any other thoughts? * [Peter Boosten](https://wordpress.org/support/users/pboosten/) * (@pboosten) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301290) * > I’m running WP 2.5.1. What do you mean by owned? Hacked? * Yes, that’s exactly what I mean, and likely, since WordPress had lots of vulnerabilities since your version. * Peter * Thread Starter [srselby](https://wordpress.org/support/users/srselby/) * (@srselby) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301339) * Thanks, Peter. So what do I do? Is there any way to restore my blog? It appears the texts to my posts are still intact, as are the links to the images… * If it’s too long/difficult to respond, is there someplace on this forum or in Codex that you can point me to? * Many thanks, Sheila * [Rev. Voodoo](https://wordpress.org/support/users/rvoodoo/) * (@rvoodoo) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301340) * [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked) will get you through everything, if you do everything recommended there * Thread Starter [srselby](https://wordpress.org/support/users/srselby/) * (@srselby) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301345) * Thanks, RVoodoo. Just checked your recommended link. Looks like it’ll be a pretty time-consuming endeavor, so I’ll plan to work on it tomorrow.. * BTW, I’m wondering.. The past few weeks, every time a write a post, I get an almost immediate comment from the same source with the same comment. (Comments need to be approved by me, and people who aren’t registered users aren’t supposed to be able to comment at all.) Could this be the “hacker”? * [Rev. Voodoo](https://wordpress.org/support/users/rvoodoo/) * (@rvoodoo) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301346) * yes it could be, pretty much, once your WP install is compromised, hackers/spammers have an open door to do whatever they wish. It will most likely be a time consuming endeavor. And unless you are complete and thorough, problems will continue to pop up. * Just a piece of advice from someone who’se dealt with it. * Thread Starter [srselby](https://wordpress.org/support/users/srselby/) * (@srselby) * [16 years, 5 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301353) * Thanks, again. I’m actually considering hiring someone to take care of this for me. I’m in Boston, so there’s no shortage of students and/or unemployed people who I’m sure can do this much more quickly and thoroughly than I could. * Aaarrrrggghhh!!! * [saltlakejohn](https://wordpress.org/support/users/saltlakejohn/) * (@saltlakejohn) * [16 years, 4 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301456) * Webadmin.php is a tool that gives anyone using it unfettered access to the entire filesystem on any *nix server. It will climb to the very root (/) and will gladly allow its user to view, edit, and delete files wherever permissions allow. * You have been hacked by some other user on your shared hosting machine. Oddly enough, the hacker left a note behind telling you what tool he used. * Google “webadmin.php” and you will find it readily available for download. At the same time you’ll probably spot a few sites hacked like yours — with the webadmin branding inserted at random points in the body. I found one site that when I clicked on it webadmin opened as the site’s front page, thus giving any surfer passing by access to every user account on that filesystem. * The same happened to me a few years ago, and I’ll tell you, I learned everything I could about securing my website and my WordPress as quickly as I could. Ultimately, I moved to another host and started fresh. I’m sorry it happens. It’s like coming home to find that burglars have torn up your home. You feel violated. I know about that, too. Viewing 11 replies - 1 through 11 (of 11 total) The topic ‘Sidebar disappeared AND “webadmin.php” appeared’ is closed to new replies. ## Tags * [sidebar](https://wordpress.org/support/topic-tag/sidebar/) * 11 replies * 6 participants * Last reply from: [saltlakejohn](https://wordpress.org/support/users/saltlakejohn/) * Last activity: [16 years, 4 months ago](https://wordpress.org/support/topic/sidebar-disappeared-and-webadminphp-appeared/#post-1301456) * Status: not resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics