Wordpress insecurities

**Shenron** · 3 January, 2009, 15:48 PM

Cool!
Make sure you check your posts for "injected content".

Go to your mysql database - wp_posts and check the content there.

I've had some problems before with hidden html code.

**Mike Dammann** · 3 January, 2009, 17:06 PM

Thank you to everyone who has helped!

**elishevadpw** · 4 January, 2009, 02:00 AM

Originally Posted by Shenron

Cool!
Make sure you check your posts for "injected content".

Go to your mysql database - wp_posts and check the content there.

I've had some problems before with hidden html code.

What is "injected content"?

**Shenron** · 4 January, 2009, 14:17 PM

SQL injection - Wikipedia, the free encyclopedia

Typically hackers inject some hidden content into your posts body (usually at the begining)

You can catch those by browsing your Mysql results and look for odd html tags

**5starpix** · 4 January, 2009, 14:56 PM

Originally Posted by Shenron

SQL injection - Wikipedia, the free encyclopedia

Typically hackers inject some hidden content into your posts body (usually at the begining)

You can catch those by browsing your Mysql results and look for odd html tags

Do you think there is a way to prevent that?

**Shenron** · 4 January, 2009, 15:28 PM

Keeping your Wordpress and plugins updated it's the best recipe.

**thatsfine** · 17 January, 2009, 01:28 AM

Hello,

There is also one more major security issue with wordpress.

/wp-contents/uploads have CHMOD 777

Hackers Upload a Phishing site in there. So change the CHMOD to 755.

Make Wordpress Better.

Thanks