Naulex
Regular Member
- Apr 17, 2017
- 283
- 261
I will try to explain it in an easier way, maybe it can help more people later.Just found your edited version of reply, I am very curious about this, but I can't really understand it![]()
> First, log in on your server, not in WordPress, in your cPanel.
> Now, look for an option called something like "File Manager" or "FTP" or something like that (it depends on the host)
> Enter there and look for a folder called "public_html"
> Enter the folder, you should see the WordPress system (a lot of files and folders)
> Create there a new file (should be an option called something like "New file" in some place on that window) and call it test.php
> Once you are inside that file at this code:
Code:
<?php phpinfo(); ?>
> Right now, we are going to test if everything is fine: Go to your main url (in your case, you said it was shaanigDOTse) and add "/test.php". So it will be shaanigDOTse/test.php
> Navigate to that URL, you should see a lot of information about your server, save it or just screenshot
> Wait a while and go to the mirrored site (you said it was hana-1tvDOTcom) and try to access to hana-1tvDOTcom/test.php
> If you can and you don't get the same data you saw on your site, they are able to copy your site (including PHP files and DB) so you have a backdoor/exploit/something
> Anyway, remember after doing this test to delete the test.php file since it contains a lot of information that you don't want to share with everyone
Hope it helps you (or anyone)!