Forum Replies Created

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter ImanGM

    (@credo61)

    Hey Andrew,

    Thank you for your advice. I’ve reinstalled the site and made some improvements on the logins page and put some monitoring tools on it to check if this happens again.

    Thank you again.
    Iman

    Thread Starter ImanGM

    (@credo61)

    Hello Andrew,

    Thank you for your reply. So, is there any way to find out how this user was logged into WordPress from the log files? I guess, by default, there’s not any logging feature in WordPress and the Apache doesn’t log the content of the POST requests to find out which account is used to log into the WordPress.

    As I said before, this site was under construction and I can recreate it. So, there is not any problem with it. But just for Forensics and since this is not the first time a similar attack happened within last month, I want to find out how this user was able to log into WordPress on his first try…

    Any suggestions for investigating this issue?

    Thank you.
    Iman

    Thread Starter ImanGM

    (@credo61)

    I’ve used admin-ajax.php to load my content into tinyMCE plugin iframe without including wp-load.php.

    thanks

Viewing 3 replies - 1 through 3 (of 3 total)