My Site was Hacked!!

[valle]

One of my sites was hacked. Luckily it wasn't a money site, just one I used for its PR. Still sucks though..

http://www.unilivre.org

 

[valle]

Anyone know how they would do this?

 

[blogdev]

Are you with hostgator ??

 

[valle]

Yeah I use Hostgator.

 

[jbarrett]

there are many ways they can get it.

Do you have a strong password for your admin / cpanel area?
check all your files to see if they have copied a hacking program to your site. They could of uploaded files to a directory that has public write access such as an image / temp folder

 

[blogdev]

Yeah I use Hostgator.

They have some serious security issue... Move all your site to another host, they suck.

 

[valle]

check all your files to see if they have copied a hacking program to your site. They could of uploaded files to a directory that has public write access such as an image / temp folder

I only had Wordpress installed on this domain.

 

[valle]

They have some serious security issue... Move all your site to another host, they suck.

Any other hosting company you recommend?

 

[blogdev]

Any other hosting company you recommend?

I'm using apthost for the last year, never had any problem with them

 

[cataratas]

Makes me laugh. People slag of a host company and then don't recommend an alternative. What's the point in that?

 

[valle]

So, I found a index.htm file that wasn't there before and I deleted it. Now there is just a blank page. Anyone else see the same thing?

 

[spiider]

Just contact with your hosting provider i hope they will resolve it quickly.

Few security tips for wordPress site

Chap Secure Login plugin- Whenever you try to login to your website, your password is sent unencrypted. If you are on a public network, hacker can easily ?sniff? out your login credential using network sniffer.This plugin adds a random hash to your password and authenticate your login with the CHAP protocol.

login lockdown plugin- Hackers can easily crack your login password and credential using brute force attack. To prevent that from happening, you can install the login lockdown plugin.

Make sure you use a strong password

Protect your wp-admin folder Use AskApache Password Protect to password protect the directory and give access right only to authorized personnel.

WP-Security Scan plugin- Remove WordPress version info

Hide your plugins folder You can easily hide this page by uploading an empty index.html to the plugin directory.

upgrade to the latest version of WordPress and plugins

Hope its help you for future..

 

[JackSparrow]

Make sure you get the permission settings right for the php files and folders for WordPress. 755 for folders. 644 for files.

Had loads of errors and issues when these weren't setup right when installing WordPress.

 

[davids355]

Keep permissions tight. Have strong password for admin. Also imagine you can probably change default admin path? And keep everything up to date!
That's all you can do.

Ps i had my money site hacked last year when I was on holiday, my host shut the whole site down cos it was infected or whatever. It was down for a whole week - total suck!

 

[nexusonline]

I think is hard to hack a wordpress site .