Page 1 of 3 123 LastLast
Results 1 to 10 of 24

Thread: Wordpress Blog Hacked

  1. #1
    elishevadpw's Avatar
    elishevadpw is offline Net Builder
    Join Date
    Dec 2008
    Location
    under the equator
    Posts
    120
    Thanks
    40
    Thanked 45 Times in 17 Posts

    Wordpress Blog Hacked

    All of our Wordpress sites in our servers got hacked.

    The index.php file was overwritten by the hackers code and this shows up instead of our sites:




    We tried recovering the index.php file but it didn't help. How do I restore this?

    Thanks.

  2. #2
    Aquarezz's Avatar
    Aquarezz is offline Master Net Builder
    Join Date
    Dec 2008
    Location
    Belgium
    Posts
    3,852
    Blog Entries
    4
    Thanks
    683
    Thanked 591 Times in 463 Posts
    Why can't you just reupload the original index.php to your server?

    Greets
    |Nico Lawsons

  3. #3
    Shenron's Avatar
    Shenron is offline Administrator
    Join Date
    Dec 2008
    Location
    Portugal
    Posts
    1,900
    Blog Entries
    2
    Thanks
    561
    Thanked 548 Times in 368 Posts
    What version are/were you using?
    Do you have a backup?
    Is the database still there?

  4. #4
    Mike Dammann's Avatar
    Mike Dammann is offline Super Moderator
    Join Date
    Dec 2008
    Location
    Geographically flexible
    Posts
    964
    Blog Entries
    3
    Thanks
    237
    Thanked 182 Times in 148 Posts
    2.6.5
    and yes to both other questions
    For blood type dating go here. If your blood type is rhesus negative, go there. If you are bored and feel like liking a Facebook page, hit this one.

  5. #5
    Shenron's Avatar
    Shenron is offline Administrator
    Join Date
    Dec 2008
    Location
    Portugal
    Posts
    1,900
    Blog Entries
    2
    Thanks
    561
    Thanked 548 Times in 368 Posts

  6. #6
    elishevadpw's Avatar
    elishevadpw is offline Net Builder
    Join Date
    Dec 2008
    Location
    under the equator
    Posts
    120
    Thanks
    40
    Thanked 45 Times in 17 Posts
    Quote Originally Posted by Shenron View Post
    No backups but the database are all still there.

    ALL sites in our host account got hacked not just the WP blog but the joomla as well.

    We tried overwriting index.php and succeeded but that annoying black page is still there.

    Will helped me find all the index.html and index.htm etc and we deleted them all.

    But it's still there!

  7. #7
    Shenron's Avatar
    Shenron is offline Administrator
    Join Date
    Dec 2008
    Location
    Portugal
    Posts
    1,900
    Blog Entries
    2
    Thanks
    561
    Thanked 548 Times in 368 Posts
    Have you checked your .htaccess file for redirects?

  8. #8
    elishevadpw's Avatar
    elishevadpw is offline Net Builder
    Join Date
    Dec 2008
    Location
    under the equator
    Posts
    120
    Thanks
    40
    Thanked 45 Times in 17 Posts
    The .htaccess file is just this:

    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /home/
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /home/index.php [L]
    </IfModule>

    # END WordPress

  9. #9
    elishevadpw's Avatar
    elishevadpw is offline Net Builder
    Join Date
    Dec 2008
    Location
    under the equator
    Posts
    120
    Thanks
    40
    Thanked 45 Times in 17 Posts
    We found 3 files with the defacement message:

    mainbody.php, default.txt, and x.htm.

    We deleted them all but it kept recreating itself

    Like, Mike deleted them and when I checked they were still there. Then I deleted them, and when Will checked they were still there. Then Will deleted them and he checked again and they're still there.... so strange.

  10. #10
    Codythebest's Avatar
    Codythebest is offline Net Builder
    Join Date
    Dec 2008
    Location
    Fuerteventura
    Posts
    167
    Thanks
    4
    Thanked 29 Times in 25 Posts
    I wonder what they get from doing that???
    It happened to me as well before...
    Cabins Renta
    New & Free Bitchylife.com widget is ready !
    7 methods to create free PVAs at 7pva.com

Page 1 of 3 123 LastLast

Similar Threads

  1. V7N Hacked!
    By WebEvader in forum Forum Life
    Replies: 12
    Last Post: 29 September, 2010, 09:17 AM
  2. Hacked
    By Sbfc_ in forum Community Building
    Replies: 24
    Last Post: 26 March, 2010, 12:48 PM
  3. [WTS] Hoover Wordpress Blog (Unquie Wordpress Theme)
    By Marcell Purham in forum Themes
    Replies: 0
    Last Post: 15 December, 2009, 20:36 PM
  4. Replies: 14
    Last Post: 30 August, 2009, 02:33 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •