Forum Replies Created

Viewing 15 replies - 31 through 45 (of 104 total)
  • I find the BulletProofSecurity plugin is very helpful in preventing site hacking (I had all my sites hacked 3 years ago) for 2 main reasons:

    • it warns if any of your files have open access permissions
    • it takes a backup of your files and will quarantine/restore anything that has been changed unexpectedly

    It also blocks and logs hacking attempts as well as failed logins, and the logs can be very enlightening, showing you just how many attempts there are from bots to break into your site.

    Same problem here.

    The location override in the config file has always worked before, and indeed the Help/Constants display on the Backup WordPress page shows correctly. I can backup ok, but the page shows no backups have been taken, and the backup zip file goes into the default folder.

    HMBKP_PATH:

    You’ve set it to: /home4/poddys/public_html/_delovesto.com/wp-content/bps-backup/WPbackup

    The path to folder you would like to store your backup files in, defaults to /home4/poddys/public_html/_delovesto.com/wp-content/backupwordpress-f542425e86-backups. e.g. define( ‘HMBKP_PATH’, ‘/home/willmot/backups’ );

    It would be nice to get this working with the override again, because every time I update the plugin, by default it creates a folder with another name, and that causes BPS to quarantine the backups until I update it.

    Thread Starter poddys

    (@poddys)

    Sorry I messed up the paste of the data from bachground update tester.
    Can’t edit or delete this so I am going to mark it as resolved and repost.

    Maybe you need to delete the old cache? The plugin was rewritten completely and now saves the pages in a completely different format. I found some anomalies but having cleared the cache it works fine now.

    @fwchapman I also use backupwordpress. It is an excellent plugin.

    Great information, we got hacked too, and even though most of our site is not WordPress based, ALL of our PHP files had a malicious script added to the beginning.

    I used a free Windows program “replacetext” to scan and replace the code in over 1,000 PHP files (it also takes backups and gives a log of all changes).

    I found a backdoor in wp-content/upload/wysija/themes/*/*.php. – there was an index.php which had been cleaned, but it also had a second script in the file (crafty!). Now that has been removed also.

    Will update if I find anything else unusual.

    Ah ok, I will try that, thanks. The last thing I want to do is to expose any Admin account on the site.

    I am having the same problem, maybe the following information might be of use.

    My emails were coming from my site admin email address, which I don’t want, so I set up a new dummy user with a domain email address.

    However, this user does not appear in the drop down list unless I make them an administrator. If I do, they appear and I can set them as the email sender. However, if I change them back to Subscriber the email sender reverts to either Post Author or Administrator.

    Hope this helps, and it would really be nice to select a dummy account, especially as hackers keep trying to hack into my site all the time (I have login protection thankfully).

    Thread Starter poddys

    (@poddys)

    Follow up….

    I installed the “Background Update Tester” plugin and this is showing “PASS” for everything, so we shouldn’t have a problem.

    However, on updating plugins, the screen stays on the “Installing” screen, even though the update has completed, and we get the following in the php.log:

    [23-Apr-2014 13:18:31 UTC] PHP Warning: An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the support forums. (WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.) in /www/zendsvr/htdocs/news/wp-includes/update.php on line 120

    (also lines 272 and 417).

    Thread Starter poddys

    (@poddys)

    Updated to add… the plugin did finally install. Not sure why it would’t initially though.

    poddys

    (@poddys)

    It sounds like you want a static front page (as Esmi said) and you could add to that an RSS Feed showing your latest posts. The “Lexi” plugin will do that, otherwise you can only add RSS Feeds using widgets in the sidebar/footer.

    poddys

    (@poddys)

    When WP-Debug is turned on the following error shows above the icons in the widget area of the sidebar:

    Notice: Undefined index: filter in /www/zendsvr/htdocs/news/wp-content/plugins/social-media-widget/social-widget.php on line 443

    Same problem, but in our case only showing when Debug is on.

    Thread Starter poddys

    (@poddys)

    My apologies, just too many plugins with similar names…

    You won’t find anything that will be able to import from static pages to WordPress, I am reasonably certain of that.

    Are the PHP pages mostly of the same format (ie: Header, Footer, Sidebar(s) and a section for Content)?

    If so, you could find a WordPress Theme that you like (or start with one of the free ones, Twenty Fourteen is pretty good). Format this so it suits your needs, then create pages/posts for each of the old static ones by pasting in the “Content” from each page into WordPress.

    It’s not perfect, and it’s simpler if that content doesn’t contain PHP or images.

    That ought to get you the posts/pages in WordPress, albeit a LOT of work, and from there you can edit each, converting images etc to be in the regular WordPress Media folders, and then update/change theme so the site looks how you want it to.

    The other factor is SEO/Duplicate content, since Google could penalise you for duplicating pages. I would recommend setting the new site to not get indexed until you are ready to do that, and of course the pages are almost certain to have a new url. You could create redirects in your .htaccess file so the old pages are redirected to the new ones, or make sure the WordPress pages have the same url as the old (nice if you can manage it, but WordPress pages don’t end in “.php”. You could strip this in the redirect though).

    Hope this helps in some way.

    Thanks Peter. Good Luck too.

Viewing 15 replies - 31 through 45 (of 104 total)