Site Hacked. Restored. Can't Log Into Admin

Resolved reclifford
(@reclifford)

9 years, 7 months ago

My wordpress site was recently hacked and all we could see on the site was the page the hacker left. After a long bout with our host we were able to restore the site. Now the only thing I cannot do is access the wordpress admin for that site. Tried getting new password but it keeps saying there is no username/email registered with that name.

What can I do to fix this?

Viewing 4 replies - 1 through 4 (of 4 total)

Moderator Jan Dembowski
(@jdembowski)

Forum Moderator and Brute Squad

9 years, 7 months ago

For the password portion give this a read.

http://codex.wordpress.org/Resetting_Your_Password

For the hacked site, even with the restored backup you really need to start working your way through these resources:
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
Hardening WordPress
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

http://blog.sucuri.net/2010/07/understanding-and-cleaning-the-pharma-hack-on-wordpress.html

cole_andhercamera
(@cole_andhercamera)

9 years, 7 months ago

I’ve run into a similar situation that I was screwed by a designer and now can’t access my admin.

None of my emails work to login, therefor I can’t reset the password.

I’m not familiar with WP at all, except for writing blogs… so I’m basically screwed!
UGHHH – I really wish WP had an 800 number to figure this out.

Thread Starter reclifford
(@reclifford)

9 years, 7 months ago

Thanks for the articles Jan.

I was actually able to resolve it by changing my username and password in the MyPHPAdmin database under wp-users then clicking edit and then just changing it from there where is had my username, password and email.

BenSucuri
(@rngdmstr)

9 years, 7 months ago

Was just going to say you can use the database for this 🙂 Nice one!

This is also why a leaked database password is such a huge problem, since new admin users can be created on a whim.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Site Hacked. Restored. Can't Log Into Admin’ is closed to new replies.

Site Hacked. Restored. Can't Log Into Admin

Tags

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics