website hacked

R

runningfree73

Registered Member
Joined
Jun 19, 2013
Messages
72
Reaction score
0
One of my sites (Wordpress) was recently hacked and all the content was deleted. All that was left was a main index page that redirected to the hacker's own site. I was hoping someone here could offer me advice on how to better protect against any future hacking attempts. I've never had anything like this happen before and the site that was hacked is an expired domain hosted on a $1 hosting account while the rest of my sites are with Hostgator. Is security a problem with cheap hosting accounts?
 
Advertise on BHW
Oh wp is not good for security. Here is few tips

1. Never use too many plugins
2. Never use any nulled theme
3. Never keep your wp log in id "admin"
4. Always use 0 in your passwords
5. Keep your WP, plugins and themes updated
6. Never save your password in browser.
7. Get a wp security plugin.
 
Were you able to restore your website? If not, you should keep regular backups of your SQL database and other files that way you can quickly restore your website. Also, here are some additional tips:


  1. Do not use plugins that haven't been updated in over a year
  2. Run a virus scan on your computer
  3. Backup your SQL database
  4. Backup your files
 
Thanks for the tips. I was able to recover most of my content from the database but it was still a major PITA. The hacker could have easily deleted the database too so I was lucky that didn't happen. There was no backup so I would have been totally screwed if he had. The entire Wordpress installation was deleted so I presume it was my hosting account that was hacked and not just my Wordpress admin.
 
runningfree73 said:
Thanks for the tips. I was able to recover most of my content from the database but it was still a major PITA. The hacker could have easily deleted the database too so I was lucky that didn't happen. There was no backup so I would have been totally screwed if he had. The entire Wordpress installation was deleted so I presume it was my hosting account that was hacked and not just my Wordpress admin.
Click to expand...
Wow, well that's great you were able to at least recover most of your content. Good luck with increasing your website's security!
 
8.Never use 123systems.net I have a cheap hosting account with this company and my site was hacked also. They don't even respond to my ticket.
Nut-Nights said:
Oh wp is not good for security. Here is few tips

1. Never use too many plugins
2. Never use any nulled theme
3. Never keep your wp log in id "admin"
4. Always use 0 in your passwords
5. Keep your WP, plugins and themes updated
6. Never save your password in browser.
7. Get a wp security plugin.
Click to expand...
 
i recommand plugin BulletProof Security for wordpress!
 
Do you know if it was just your page hacked or more on the same server?
If it was more than you then at a guess another account could of had a vulnerability that allowed the attacker to get access to all the accounts on the server.

Shared hosting is a pain in the ass if:

1. The hosting company is not shit hot and on top of their server maintenance and for $1 a month I am guessing they don't have the best sysadmins on the books. People who install cPanel and say they are hosts need a good kick in the bollocks, they need to understand sysadmin roles and security.

2. If one account gets a runaway script then the whole server suffers.

3. If everyone is using a shared IP address and one site gets a DDoS then again the whole server is stuffed and so your sites go south.

So, really what I am saying is you can be on top of your game but if everyone around you isn't, you are still at risk - if your site is worth something try looking at your own VPS or dedicated server.

Just my opinion though :)
 
runningfree73 said:
One of my sites (Wordpress) was recently hacked and all the content was deleted. All that was left was a main index page that redirected to the hacker's own site. I was hoping someone here could offer me advice on how to better protect against any future hacking attempts. I've never had anything like this happen before and the site that was hacked is an expired domain hosted on a $1 hosting account while the rest of my sites are with Hostgator. Is security a problem with cheap hosting accounts?
Click to expand...

Sure it is. Cheap and secure don't get along well.
 
You might want to setup an external backup script to prevent this in the future.
 
dazk2002 said:
8.Never use 123systems.net I have a cheap hosting account with this company and my site was hacked also. They don't even respond to my ticket.
Click to expand...
Well, guess what? I'm using 123systems too but they did respond to my tickets so at least their customer service has improved!
 
runningfree73 said:
Well, guess what? I'm using 123systems too but they did respond to my tickets so at least their customer service has improved!
Click to expand...
It's been a week since my site was hacked but still no response from them. They are absolute shit. Is this the page you get now? hack.png
 
Last edited:
dazk2002 said:
It's been a week since my site was hacked but still no response from them. They are absolute shit. Is this the page you get now? View attachment 54231
Click to expand...
Yeah, that's it and my site was also hacked about 1 week ago. I wanted to change my username but they said it wasn't necessary and the advice they gave wasn't very helpful either.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top