wpsecuritylock
Forum Replies Created
-
Great and good luck. Be sure you change your site and home page url so it doesn’t look for the subdirectory too.
Forum: Fixing WordPress
In reply to: Can't login to AdminYou should contact your host and tell them you can’t login. Their backup restore should be the same as it was. Maybe a file is missing.
Forum: Fixing WordPress
In reply to: Emails sent from WordPress Subject: 60I just another email just like it. Any ideas what these mean? I am using WordPress 3.0.1.
Forum: Fixing WordPress
In reply to: blog hacked – how can I return it to how it was?geester1, luckily you’re site isn’t blacklisted by search engines yet. You need to get it fixed as soon as possible.
If you don’t have a backup, there are ways to fix it, but first you need to know what’s been hacked (files, database, etc).
Feel free to contact me on Skype and I’ll see if I can help.
When you move your site, you need to export your database so you can import it at your new host.
After you have it exported, you can easily use Notepad++ to do a find and replace your server path from your computer.
Hope that helps.
Forum: Fixing WordPress
In reply to: I forgot Login and password combination. How to restore it?For controlling spam, be sure you have your Akismet plugin enabled. And you could use something like SI CAPTCHA Anti-Spam to help control them.
http://wordpress.org/extend/plugins/si-captcha-for-wordpress/
Do you have auto approve turned on? I personally have all of my comments set to “An administrator must always approve the comment” and checked “A comment is held for moderation.”
You can check your settings under General > Discussion.
Forum: Fixing WordPress
In reply to: I forgot Login and password combination. How to restore it?Toondra, you need to reset your username and password through the database.
Log into your hosting account and then go to PHPMyAdmin.
Once inside…
1. Click on the “Browse” icon for wp_users.
2. Click on the pencil next to the username (look for your email there).
3. Your username is listed in the “Value” text box for user_login.
4. Reset your password in the “Value” text box for user_pass.
5. Important! Under the “Function” dropdown, you must choose MD5 so it will accept your plain text email.
6. Click on the “Go” button and you’re all set.Hope that helps.
Forum: Fixing WordPress
In reply to: Godaddy wordpress blog hackedHello Arthur,
Same thing here. I just restored a website for a client 2 days ago and this morning it got this new malware. It has the same beginning injected code, but the script in the footer were different.
We just restored it to yesterday’s date to see if that takes care of it.
Check my blog post to see some things you can try.
http://www.wpsecuritylock.com/ninoplas-base64-wordpress-hacked-on-godaddy-case-study/
Let me know if you need any help.
Securely yours,
Regina Smola
Forum: Fixing WordPress
In reply to: WordPress Site HackedI just got done fixing someone’s site who was on Godaddy with this same problem.
First thing you should do is…
Change your hosting account, ftp, wordpress username, and database passwords.
If you’re using Godaddy on a Linux Hosting Account…
Login into your hosting account, go to File Manager, click on the “History” tab and see if you have a snapshot of your website before it got hacked.
Here’s how to restore it if you have a snapshot prior to the attack…
1. Go to your Godaddy hosting account “File Manager.”
1. Click on “Current” tab and delete all files on your server. This is necessary to get rid of any “extra” files that may have been uploaded.
** Note **
Do not delete or restore the _db_backups or php_uploads. These are part of Godaddy’s structure and shouldn’t be touched.2. Click on “History” tab and checkmark 3-4 files/directories at a time (so you don’t overload the server). Then click on the “Restore” icon. Repeat this process until all files are restores.
3. Edit your wp-config.php file with your new database password. And make sure you add/change your Authentication Unique Keys.
Here’s a article on how to use Restore…
http://community.godaddy.com/help/2009/02/02/restoring-a-linux-hosting-account/If you need further assistance, please let me know.
Hope that helps.
Forum: Fixing WordPress
In reply to: need help urgentCan you try to change it from inside the database?
Forum: Fixing WordPress
In reply to: lost blog after upgradeLike I said, it’s an outdated post. The ones that had problems did have that issue and it worked.
Forum: Fixing WordPress
In reply to: lost blog after upgradeThis is an outdated post, but here’s someone with the same problem with an older version, which led me to look in their wp-config.php and it worked.
http://www.amandavandervort.com/blog/2009/12/how-i-solved-my-wordpress-white-screen-of-death/
Forum: Fixing WordPress
In reply to: lost blog after upgradeBy space, I mean an return.
Forum: Fixing WordPress
In reply to: lost blog after upgradeFor some reason, recently people have had this same issue and found an extra space in the wp-config.php that caused this so called ‘white screen of death.’ I still haven’t figured out if it’s related to the upgrade or if they are messing with that file before hand. I have helped about 10 webmasters in the last month with this same problem. They all said they didn’t change the file and only did the upgrade.
Forum: Fixing WordPress
In reply to: eval(base64_decode HACKEDI did a search on <?php /**/ eval(base64_decode(“aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZ and found this in Google Cache. Looks like the same code:
Have you tried installing the antivirus WP plugin? You can do a manual scan of your theme templates to help identify the code. If not, you can download it here: http://wordpress.org/extend/plugins/antivirus/