Well, I’ve just checked out everything in the guide, and I don’t think we’ve been hacked… There’s no nasty messages, defacement pages, iframes to malicious JS, ads, backdoor scripts, etc. I’ve had a little experience in penetration testing, and we look good. I checked out the plugins we were using, and the theme, and none of them had public exploits for the current version. I installed a couple security plugins too, and made all of the recommendations they gave me. If we did get hacked, I think it must’ve been our host. I’ll keep looking and testing though. In the meantime, is there anything else that could’ve gone wrong?
A couple of things you could try:
- Switching to the default theme by deleting or moving all other themes from /wp-content/themes
- Renaming your plugins folder at /wp-content/plugins
- Re-installing WordPress
If that doesn’t work contact your host and have them look into it. I’ve not had very good experiences with free webhosts, but that’s not necessarily the problem.
Hey, I moved out all the other themes and tried renaming the plugin folder, but neither one worked. I’m a little hesitant to reinstall WordPress though… Is there anything else that could be wrong? I talked to my host, and they said that it could be the CSS cache. I then googled this, and came up with this page: http://markjaquith.wordpress.com/2009/05/04/force-css-changes-to-go-live-immediately/. It said to insert the following code to force the CSS cache to update:
<link rel="stylesheet" href="<?php bloginfo('stylesheet_url'); echo '?' . filemtime( get_stylesheet_directory() . '/style.css'); ?>" type="text/css" media="screen, projection" />
The only problem is that I don’t know where to put this! Do I add it to my theme’s style.css? Or would I add it to the “default” theme’s style.css? Or some other file? Thanks again for the help, I hope I can get this working somehow…
Just in case you didn’t know, re-installing WP doesn’t delete your data. It just replaces the actual software. I’d go ahead and re-install. Other than that I’m out of ideas. Is there anything you can think of that you may have changed before this happened?
@vevisoenterprises put it into header.php in your theme.
But make sure the new link is in <head></head>section and after the original stylesheet link.
Thank both so much. I just inserted the code, and loaded our main page, and everything came up perfectly! This is great. Thank you again!
