Title: Barneyntd's Replies | WordPress.org

---

# Barneyntd

  [  ](https://wordpress.org/support/users/barneyntd/)

 *   [Profile](https://wordpress.org/support/users/barneyntd/)
 *   [Topics Started](https://wordpress.org/support/users/barneyntd/topics/)
 *   [Replies Created](https://wordpress.org/support/users/barneyntd/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/barneyntd/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/barneyntd/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/barneyntd/engagements/)
 *   [Favorites](https://wordpress.org/support/users/barneyntd/favorites/)

 Search replies:

## Forum Replies Created

Viewing 3 replies - 1 through 3 (of 3 total)

 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Calling all site owners hacked by walangkaji/ Badi etc. – Need some help](https://wordpress.org/support/topic/calling-all-site-owners-hacked-by-walangkaji-badi-etc-need-some-help/)
 *  [Barneyntd](https://wordpress.org/support/users/barneyntd/)
 * (@barneyntd)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/calling-all-site-owners-hacked-by-walangkaji-badi-etc-need-some-help/#post-3357620)
 * At the time of the hack I had a bunch of simple plugins I wrote myself, akismet,
   and wordpress-importer. Nothing else, not even disabled.
 * Barney.
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Hacked by walangkaji](https://wordpress.org/support/topic/hacked-by-walangkaji/)
 *  Thread Starter [Barneyntd](https://wordpress.org/support/users/barneyntd/)
 * (@barneyntd)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/hacked-by-walangkaji/#post-3315863)
 * [@jprice](https://wordpress.org/support/users/jprice/): I wiped everything, installed
   the latest WP, plugins & theme, and imported the database from a month ago, which
   I was certain was clean (it’s not a high traffic site). Then I changed all the
   admin passwords, which are in the database. The few posts this lost I imported
   one by one, checking all the data. I’ve not had any repeats so far.
 * I haven’t found any hacks to the files at all (though I might have missed something
   subtle); all the hacks were in the database. So far I have found three changes,
   all in wp_options:
 * (4, ‘blogname’, ‘Hacked by walangkaji – The Crows Crew’, ‘yes’),
    (36, ‘blog_charset’,‘
   UTF-7’, ‘yes’), (89, ‘widget_text’, ‘a:2:{i:2;a:3:{s:5:”title”;s:0:””;s:4:”text”;
   s:178:”<script>document.documentElement.innerHTML = unescape(”%48%61%63%6b%65%
   64%20%62%79%20%77%61%6c%61%6e%67%6b%61 %6a%69%20%2d%20%54%68%65%20%43%72%6f%77%
   73%20%43%72%65%77”);</script>”;s:6:”filter”;b:0;}s:12:”_multiwidget”;i:1;}’, ‘
   yes’),
 * I think it’s the ‘widget_text’ which causes the blank screens and other problems:
   half my sidebar was missing, which is probably everything from this point down.
 * Still no clue how he did it.
 * Barney.
 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Hacked by walangkaji](https://wordpress.org/support/topic/hacked-by-walangkaji/)
 *  Thread Starter [Barneyntd](https://wordpress.org/support/users/barneyntd/)
 * (@barneyntd)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/hacked-by-walangkaji/#post-3315816)
 * Well, I think I’ve got everything working again, now with latest versions of 
   wordpress & theme.
 * Does anyone know whether this is a WP problem or a server problem? I’m on kNet
   Hosting.
 * [@bristena](https://wordpress.org/support/users/bristena/) I thought your post
   was valuable! It’s good to know I’m not the only one.

Viewing 3 replies - 1 through 3 (of 3 total)