My friend wordpress site GOT HACKED, WHAT TO DO?

Donkey Kong

Regular Member
Joined
Jan 10, 2012
Messages
267
Reaction score
74
hey guys, anyone friendly with this please have a look at this:

Code:
joannakinsman.com/odesk

Although she can get back admin control but after awhile that nasty hacker re-occur keep repeat the joke. I do some google search but haven't got much result. The thing is we don't know where the loophole is or where did the hacker inject his script open site backdoor to get back after works.

I need a lot of you guys help then, thanks for caring!
 
do you have back-up ??? just delete your site and upload it or find the injected code to your site.
 
do you have back-up ??? just delete your site and upload it or find the injected code to your site.

I know how it is right, delete the whole and install from fresh. The thing irritating me is couldn't find out where's that loophole.
 
what i did is go to google and type:

cache:[sitename.com]

Copied down all my articles so at least I had that.
 
so if you do deleted the site and change password check the plug ins and themes there are injected codes there you can download tac to scan wordpress theme
 
reinstall the site
because they planted backdoor

i have a tips

write htaccess to your wp-login + wp admin double login
even they know your login info they cant do anything
 
I've seen a lot of I got hacked threads lately, if I write a tutorial on how to prevent getting hacked and what to do when you are hacked focused on worpress since its the main target would anybody be interested in it?
 
I've seen a lot of I got hacked threads lately, if I write a tutorial on how to prevent getting hacked and what to do when you are hacked focused on worpress since its the main target would anybody be interested in it?

I for one would be... I'm not an alarmist or overly worried, but at the same time, I'm not going to say that WP is bullet-proof.

BTW - maybe we should start having people list what plugins they had installed when they were hacked to see if we can see trends?
 
What are some things that I could do to prevent being hacked?

most of hacker wp these day which is they claim to be a hacker (copy paste sql inject )
they using scrape vulnerability many wordpress site to search timthumb.php

first step so to get secure

read this
Code:
http://www.mattcutts.com/blog/three-tips-to-protect-your-wordpress-installation/

2. pray and hope not to get hacked :confused:
 
Last edited:
you dont have to delete the site or anything, is it wordpress it very simple fix
 
Back
Top