Title: wiredgeek's Replies | WordPress.org

---

# wiredgeek

  [  ](https://wordpress.org/support/users/wiredgeek/)

 *   [Profile](https://wordpress.org/support/users/wiredgeek/)
 *   [Topics Started](https://wordpress.org/support/users/wiredgeek/topics/)
 *   [Replies Created](https://wordpress.org/support/users/wiredgeek/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/wiredgeek/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/wiredgeek/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/wiredgeek/engagements/)
 *   [Favorites](https://wordpress.org/support/users/wiredgeek/favorites/)

 Search replies:

## Forum Replies Created

Viewing 1 replies (of 1 total)

 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [Sites Hacked – Looking For Solution](https://wordpress.org/support/topic/sites-hacked-looking-for-solution/)
 *  [wiredgeek](https://wordpress.org/support/users/wiredgeek/)
 * (@wiredgeek)
 * [17 years, 9 months ago](https://wordpress.org/support/topic/sites-hacked-looking-for-solution/#post-836697)
 * After doing some research on this issue it looks like the hacker simply replaced
   the index.php file from within the root directory of the websites.
 * Solution:
    1) Replace the index.php file with a backup 2) Change your password
   for your website. (netfirms.ca seems to have been a webhost that has been targeted
   for this hack because their DEFAULT login is the website domain) 3) Also set 
   CHMOD 444 to the index.php which will limit the hacker from writing to the file.
   4) If you are using Joomla or similar find your configuration.php file (typcially
   found in site root directory). MAKE A BACKUP BEFORE YOU EDIT!!! Open this file
   up with WordPad (ONLY not notepad)… locate the line that says:
 * var $secret = ‘ltmhCsrG7E8lemQS’;
 * (or something similar)
 * Change this string of charecters because if you leave it default hackers will
   target you first.
 * Save the file and upload back to your server.

Viewing 1 replies (of 1 total)