Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
It’s a replacement text editor for web sites along the lines of TinyMCE.
If you do not have that code installed on your web site then you can ignore those probes. Their looking to exploit a code weakness on your system and those URL requests happen all the time.
Is this one of the way to hack a site ?
I’ve just found several of these too and I have to admit I’m freaking out a bit…especially since I’ve noticed some unusual hits in google analytics. I found these in a list a crawl errors:
manager/fckeditor/editor/dialog/fck_about.html
/lib/fckeditor/editor/dialog/fck_about.html
/js/fckeditor/editor/dialog/fck_about.html
/library/fckeditor/editor/dialog/fck_about.html
/includes/fckeditor/editor/dialog/fck_about.html
/modules/fckeditor/editor/dialog/fck_about.html
/scripts/fckeditor/editor/dialog/fck_about.html
/global/editors/fckeditor/editor/dialog/fck_about.html
/include/fckeditor/editor/dialog/fck_about.html
You said these are hackers looking for exploits and that if we don’t have anything using this editor then we don’t need to worry, but how do I know if I have this? I’ve never seen it before, but when it comes to tech knowledge I learn on the fly (bit of an autodidact but I’m feeling out of my comfort level on this one).
I’m assuming since they all received a 404 error that I don’t have it, but how can I be sure? And how can I prevent such malicious attempts in the future? Are there any good plugins that I should be aware of?
I’ve never had any issues like this until recently and now I feel like I’m being bombarded with attempts to hack and hijack my site.
I would really, really appreciate some help, guidance and advice. This is new territory for me and it’s shaking me up a bit and making me feel lost and a little overwhelmed.
Thank you in advance. ♥
Hello Kissan,
not sure if you already fixed the issue but I also discovered a few of these hits on some client websites.
First I use the plugin Redirection. This provides me with the options of login and redirecting sites. It also has a good 404 login.
I also use Ithemes security. I believe it came with WP 4.0. Not sure. But this gives you the option to block IP addresses automatically if they generate a lot of 404 hits in a short period of time.
Hope this helps!
Laurens
