I've been hacked ! Help please!!

Check your .htaccess in domain root directory and compare it with default .htaccess; check modification date of every file.
Also you can try AI-bolit - scanner that can detect suspicious files on your site.

You apply more privacy on your website.

my hosting provider has ran the scan and it has found hacks and placed them in quarantine in my cpanel and is now asking me how they should move forward - ill tell them to remove them?

They are telling me i have the option of clearing the files or replacing them with clean files WTF?

guys two other domains on my account have been hacked, I cannot even log onto them

this message comes up in all of my websites wp-includes/pluggable.php

error message : Warning: Cannot modify header information - headers already sent by (output started at/home/website/public_html/website.com/wp-load.php:72) in /home/website/public_html/website.com/wp-includes/pluggable.php on line1207


Showing on my three domains on my acc!!

What is this pluggable.php


Calling all pros

I will say again, when i go into the quarteine folder in my main website that has been hacked after my hosting has ran the scan, it shows two other domains of mines in this folder, and i can now see they have been hacked and show this error message.

Do i need to delete these two domains?

b1acky said:

Your website was most likely hacked due to poor coding/outdated plugins/security breach. Usually links/pages you are talking about are appended to the template source itself. In such situation I would suggest you backing up your database and rebuilding the site with fresh wordpress setup and plugins (since wordpress core and plugins could get infected and since you have no experience it will be hard for you to find malicious code manually). Also you should change your passwords and clean all theme files (unless you still have original not infected theme somewhere).

Click to expand...

CAn i reinstall everything manually or do i need t keep any folders/files?

my suggestion are disavow the links first

Backup before you backup, and then backup some more.

I use CodeGuard for money sites, which is seamlessly integrated into Wordpress sites now via plugin. It's a premium service, but for the peace of mind it offers, it may as well be free. It's ~$50 per website per year, so like ~$4/mo for a daily backup, and single click restores.

Any other sites I usually just get them where they need to be, then dl a full copy backup via cPanel and store off-server.

Several more-premium hosting companies offer this type of service. WPEngine, for example, has a 10-day trailing backup system that allows for single click restores. That type of hosting is $29/1 site, $99 for 10. They used to be amazing, and now are still pretty good.

Now, if you are comfortable scripting or scheduling server-side automated jobs, you can always schedule backups and have them upload to off-server locations such as Dropbox via FTP. However, if you aren't fluent enough in some a programming language that can accomplish this for you; just get the CodeGuard. Assuming you make $20/hr, in the time it would take you to figure out how to schedule those tasks yourself, you could probably back up 5 sites for 5 years.

I'm not a CodeGuard affiliate or anything, and would just suggest you Google them. I used their FTP service with a Magento site for a couple of years with little issue, and now use their wordpress plugin for several sites. You can literally set it up in 5 minutes.

As far as monitoring security in the future; WP Fence gets a lot of popular press, and has a free version, as does "Hide my WP" which is sold on CodeCanyon. Also, keep your plugins and core up-to-date.

You can assume that any security update that gets released for Wordpress has probably been getting exploited for some time before it got caught.

Nice read this thread, got to know more about wordpress security! Thanks..

Dev Warrior said:

Nice read this thread, got to know more about wordpress security! Thanks..

Click to expand...

Aren't you lucky.........

If they got your other domains too they used a chanel cracker to backdoor your database and they have access to all your sites and chanel. Who is your host I may be able to help you...

Dam auto type...I meant cpanel cracker, if you have the most basic host they usually do auto monthly or weekly backup of your sites, have you called them or logged into your chanel to look for saved backups or your databases??

your better option , disavow the links first mate that's good idea

Furious Man said:

your better option , disavow the links first mate that's good idea

Click to expand...

I would also suggest you to disavow all the suspicious backlinks, which are linking to your website.

Always interesting to read the replies of the people around here. In the back of my mind I know I should, but seeing it hammered in post after post really sticks it to the man.

Thanks OP for getting this misfortune so others may learn ( I'm not trying to mock, I really feel for you )

Get your hosts to resolve this for you.