my site has been hacked! Need help

[Faith]

my website has been defaced.it is a Wordpress site and i would like someone to fix this.anyone can do a pro bono job? i'm sure this one is easy for hackers out there.if not, tell me how much it will cost. I'll try to see what i can do.

 

[RMX]

I can do that for you, if the files and database is still there. If the attacker has deleted it, you would need a backup in order to restore the site.

 

[sam3724]

I think you had comments ON as that is a method hackers are using now. Consult someone ASAP

 

[BlackFox.io]

Future advice,
When creating the database user
1. Disallow delete and drop privileges.
2. Create backups biweekly.
3. Install security plugins for WP and change permission set on config.php

This should make you a bit more secure.

 

[nanavlad]

Call your hosting company
and tell them you've been hacked
they will clean everything for you
Free of charge

 

[Faith]

Call your hosting company
and tell them you've been hacked
they will clean everything for you
Free of charge

i called hosting company (bluehost) they asked me to enroll in their SiteLock partnership which costs $39.99 a year
so not free..

 

[hostmela]

don't need sitelock if you keep backup daily or weekly and ask your hosting company for restore old backup.thanks.

 

[Faith]

don't need sitelock if you keep backup daily or weekly and ask your hosting company for restore old backup.thanks.

I got the restore and everything is back.
but i dont know how they got in. this could happen again :/

 

[hostmela]

I got the restore and everything is back.
but i dont know how they got in. this could happen again :/

I suggest you make your password strong minimum 18 words with combination.

 

[Patel]

Theres a good plugin called bulletproof security that I use

 

[VinceC]

do not use "admin" as the username. Change all the username and passwords for all your sites that hosted in the same IP. I happened once and told the hosting company to roll back to recent backup and changed all my database username and passwords, also ftp passwords as well.

Also do u know the cause of this incident? For mine, I guess it was the plugin that I used when downloaded from here.

 

[vikasvyas47]

i can do this please add me on skype

 

[AnotherOne]

1. Do NOT use nulled plugin/theme/script on your site.
2. Add security plugins.
3. Secure wp-config, .htaccess, robots and other files


You're welcome to PM me if you're looking for someone to secure the (newly restored) site.

 

[Gogol]

Check my thread on this:

http://www.blackhatworld.com/blackhat-seo/blogging/495526-guide-make-your-wordpress-blog-hackproof-complete-guide.html#post4821645


and I do security consulting as well. PM me if you need it.

 

[No.RuleZ]

u should read more about wp security