hey guys, anyone friendly with this please have a look at this:

Code:

joannakinsman.com/odesk

Although she can get back admin control but after awhile that nasty hacker re-occur keep repeat the joke. I do some google search but haven't got much result. The thing is we don't know where the loophole is or where did the hacker inject his script open site backdoor to get back after works.

I need a lot of you guys help then, thanks for caring!

EDIT: delete please.

do you have back-up ??? just delete your site and upload it or find the injected code to your site.

Originally Posted by rulez05

do you have back-up ??? just delete your site and upload it or find the injected code to your site.

I know how it is right, delete the whole and install from fresh. The thing irritating me is couldn't find out where's that loophole.

First you should check plugins for loophole

Sent from my iPhone using Tapatalk

what i did is go to google and type:

cache:[sitename.com]

Copied down all my articles so at least I had that.

so if you do deleted the site and change password check the plug ins and themes there are injected codes there you can download tac to scan wordpress theme

Originally Posted by mysterysolver

First you should check plugins for loophole

Sent from my iPhone using Tapatalk

This is how two of my sites got hacked. Turn off all your plugins and see if the problem goes away.

reinstall the site
because they planted backdoor

i have a tips

write htaccess to your wp-login + wp admin double login
even they know your login info they cant do anything

I've seen a lot of I got hacked threads lately, if I write a tutorial on how to prevent getting hacked and what to do when you are hacked focused on worpress since its the main target would anybody be interested in it?

What are some things that I could do to prevent being hacked?

Originally Posted by __dark__

I've seen a lot of I got hacked threads lately, if I write a tutorial on how to prevent getting hacked and what to do when you are hacked focused on worpress since its the main target would anybody be interested in it?

I for one would be... I'm not an alarmist or overly worried, but at the same time, I'm not going to say that WP is bullet-proof.

BTW - maybe we should start having people list what plugins they had installed when they were hacked to see if we can see trends?

Originally Posted by ehustle_online

What are some things that I could do to prevent being hacked?

most of hacker wp these day which is they claim to be a hacker (copy paste sql inject )
they using scrape vulnerability many wordpress site to search timthumb.php

first step so to get secure

read this

Code:

http://www.mattcutts.com/blog/three-tips-to-protect-your-wordpress-installation/

2. pray and hope not to get hacked

you dont have to delete the site or anything, is it wordpress it very simple fix