How to secure my WP from infected plugins?

DorZ11

Junior Member
Joined
Feb 21, 2012
Messages
120
Reaction score
5
every week I think its infected plugin that delete all the folder of my site and I need to install WP again and import/export db and stuff..
what should I do? thanks and sorry for poor english
 
Learn PHP and check every file manually. There is no other way to do it.
 
What you got to firstly is to check whether any files are present in ur installation that are not suppose to be there. Some of these cleverly named. Secondly check each php file for "eval gzinflate" it shouldn't neccessarily be in any wordpress files. Lastly, you got to comb through ur database.
 
where did you download each plugin from? that should help narrow the list as to which ones might be dodgy
 
I search in the the plugin section for new plugins than the I download the exactly name.
 
i will suggest, "Better WP Security plugin" that's good for security.
 
Dude, rebuild the site from scratch, load your theme and leave it alone for a few days. Then add your plugins one at a time. You need patience to resolved the issue and remember that one definition of insanity is dong the same thing over and over again in the anticipation of a different result. By the way changing one variable at a time is also at the heart of scientific methodology.
 
I recommend Better WP Security plugin i found problems like you before. Better WP Security plugin help me solve problem.
 
if your downloading them from http://wordpress.org/extend/plugins/ or from the new plugins search of the admin panel then your plugins should all be good. i'd be looking at your themes , not just the one your using but any that you have installed
 
Simple, don't download plugins from untrusted sources. only use trusted source: wordpress.org and/or purchase some premium plugins instead of getting the nulled ones.
 
thanks guys I download Better WP Security plugin, ill hope it won't happend again!
 
Always download the plugins and themes from wordpress site and not from elsewhere. And check the ratings and reviews of any plugin before you install. If you find any malicious plugin from wordpress site, then report them so that they will remove such plugins from the site.
 
There are some tools in the download section> themes subsection. The thread is sticky, it should help you do basic diagnostics.
 
Don't install untrusted/suspicious plugins or themes.

To get rid of the "infection" either re-install the site from scratch (with newly downloaded plugins/themes), either manually check each php file.
 
Back
Top