Someone Hacked my website, Help

Happened to me too. I found out because I logged into Google Console and had over 1 million unindexed and 500k indexed pages.
I went to check and it worked the same way as yours, it had php and html files that, when accessed, redirect to stores (something like affiliates).
I installed a plugin that I don't remember the name of but it scans your site and detects non-WordPress files and removes them.
It also checks the code behind modifications.
 
Can i add this in my robots.txt file to prevent google crawl crawling these links

Disallow: /*.html


for this kind of pages.

Example. https://example.com/sdfsdfdf.html

https://example.com/sdfggfggfgdf.html

my site not using .html permalink
have you solved the issue? if not, PM me. I'll help you. My sites were also hacked once, I found and immediately recovered them. It's not a big work.

PS: I'm not trying to sell anything to him. Just wanted to help as a developer.
 
Is there any solution for sitemap.

/sitemap_index_38.xml
/sitemap_index_17.xml
/sitemap_index_18.xml
/sitemap_index_2.xml
/sitemap_index_23.xml

use robots.txt file disallow the hacked sitemap (unwanted sitemap generated by hacker)..

example:
User-agent: *
Disallow: /sitemap_index_38.xml
Disallow: /sitemap_index_17.xml
Disallow: /sitemap_index_18.xml
Disallow: /sitemap_index_2.xml
Disallow: /sitemap_index_23.xml
 
use robots.txt file disallow the hacked sitemap (unwanted sitemap generated by hacker)..

example:
User-agent: *
Disallow: /sitemap_index_38.xml
Disallow: /sitemap_index_17.xml
Disallow: /sitemap_index_18.xml
Disallow: /sitemap_index_2.xml
Disallow: /sitemap_index_23.xml
Thank you
 
Did you install any nulled theme or plugin? if not change the host
 
Why i remembering seeing same post around a month ago, is it same person or what?
 
I changed my robots txt file

User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php
Disallow: /*.html (this is disallow all html pages he created)

Sitemap: https://example/sitemap_index.xml

But i can see product snippet and merchant listing on GWT. How can I remove these pages.
 
First, install a redirection plugin like 404to301 to solve this issue.
Then delete your installation via ftp EXCEPT WP-content and wp-config and reinstall a clean wordpress.
 
Back
Top