Alusza
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?Thanks! I’ll see what the securi scanner tells me.
3 of the sites don’t need new user registration so all off there. The other will have users (just subscribers) that I create but no new user reg for the public.
It’s a shame. In most every respect I love WordPress as a web CMS. In this respect, it can be frustrating (having to turn off commenting). Bunch of delinquents ruining it for others 😉
Thank again.
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?No worries. One of the sites is on a dedicated server and the others are on shared. I don’t have any others sites around it with write access to root directory.
Since disabling registration/commenting ability on the affected installations (6 or so days ago), there have been no “blank” new users. Everything seems okay at the moment. Registration/commenting was on in each installation. Prior to turning it off, I’d delete a blank user and a new one would show up an hour or two later.
This must be some kind of bot creating the user. I don’t even receive notification that a new user has registered. I have iThemes Security set up pretty restrictively: no admin user, no default admin userID, database tables are unique not default, locking down the backend between midnight and 6:00 a.m. SQL injection is thwarted by iThemes. All themes/plugins and WP up to date.
I have external backups so I’m trying not to worry about it. Thanks for checking back.
Thanks Gerroald. I guess for the time being I get most of the protection provided by iThemes Security (feel naked without it now). Just worry about SQL injections attacks.
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?I guess I’ll just have to keep a close watch. Sites seem okay since turning off “allow comments”.
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?Oh no! I just logged into a 3rd site and it has 3 blank users. Something is happening for sure. Heeeeelp! 😉 I may have to pay for securing these installations.
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?Thanks. I appreciate the offer. Happened again in a different installation. 1 blank user (user: blank, email: blank, role: “none”, posts: blank). I deleted the user. Changed wp pwd, changed db pwd. Commonalities are: me logging in as admin, ithemes security, updraft plus plugin, wordpress 4. Blog comments were allowed in both though moderation was tight. I turned off “allow comments”.
Scanned my system with malwarebytes and windows defender. Clean. Not sure what to do. Hoping it is some anomaly. Contacted UpdraftPlus dev’r because that plugin was recently installed on both installations. Dev’r says it’s not his plugin (I do believe that). Not sure about iThemes Security. See no chatter about this as an issue with the plugin.
Using sftp for both sites. Not using secure wp login over https though.
Weirdness.
Forum: Fixing WordPress
In reply to: blank wordpress user entry – hack attempt?Hi. Thanks very much.
Can’t tell if they were admins because “Role” was blank as were all other fields. It was, in essence, an empty user. No user name, email, role, posts. Just a row with no values in it.
Securi says it’s clean. Thanks for that!
WP, themes, and plugins up to date. I’ll change the db password right now.
Forum: Themes and Templates
In reply to: [Adamos] How to Edit the Menu WidthAny time. Good luck with your project.
Forum: Themes and Templates
In reply to: [Adamos] How to Edit the Menu WidthHi.
You could change the width of the navigation with CSS in style.css
.site-navigation.main-navigation {
width: 1200px;
}…but, I wouldn’t recommend this. Not optimal. Your navigation anchor text is quite wide. You’d be better off shortening the nav item text. Your homepage graphic at top already tells visitors its the “Mega China Convention”, so you could shorten “Mega China Connections Convention” in the menu to “2015 Convention” or even “About” (which is what it is). “Information for Suppliers” isn’t really necessary. “Suppliers” would suffice. The menu would be much narrower this way.
Then you’d have.
About | Suppliers | Tickets | Location | Flight & Hotel Deals | Training Video | Contact
Hope this helps.
Yes…this worked. Thank you! I had used the reset in wp-config but it didn’t take. Couldn’t figure out why. It was the caching. Thanks for that!