Wordpress Exploit ... Heads Up For BHW Members

Advertise on BHW
People really need to get rid of that admin username. Recently I saw someone trying that on mine but luckily I had changed it long before. I got that plugin wp better security(I think that's the name), and it shows you a log of people trying to sign in.
 
ilovestocks said:
People really need to get rid of that admin username. Recently I saw someone trying that on mine but luckily I had changed it long before. I got that plugin wp better security(I think that's the name), and it shows you a log of people trying to sign in.
Click to expand...


How do I change the username?

I can't delete the admin profile and I can't change the admin username.
 
"The attacker is brute force attacking the WordPress administrative portals, using the username 'admin' and trying thousands of passwords."

Solution is simple as you can see.
 
You can change username in phpmyadmin.
I also have a great ddos script i try it on my every WP site using ninja security and CDN high security but the script is damn good it breaks every security so i think stay away from WP. now i started making sites in html and some rare scripts.
 
IamNRE said:
How do I change the username?

I can't delete the admin profile and I can't change the admin username.
Click to expand...

Deleting and assigning and more is just bunch of headache. Just go ahead right into the database, using any tool such as phpmyadmin and change the username in the wp_users table.

You just learned how to do something 1000s of people don't know, so just email everybody, linking to the news page, and make money by offering admin name change. :cool:
 
IamNRE said:
How do I change the username?I can't delete the admin profile and I can't change the admin username.
Click to expand...
It is very very easy to change the 'admin' to any other name using the better wordpress security plugin
 
Damn... I can't log into dashboard. it says
[h=1]Error establishing a database connection[/h]I hope everything is ok ;x
 
T2tkid said:
It is very very easy to change the 'admin' to any other name using the better wordpress security plugin
Click to expand...


Nice share... really user friendly plugin! My site is now much safer IMO.

Thanks
 
Its look like a lots of work for me I hope there should be bot for this aswell :P
 
capripio said:
Its look like a lots of work for me I hope there should be bot for this aswell :P
Click to expand...

It's easier than you think and I'd rather do it through phpMyAdmin than through a plugin.

Code: 
http://www.wpbeginner.com/wp-tutorials/how-to-change-your-wordpress-username/
 
Great topic. My ISP took me off line after detecting the attack. It spiked the CPU on the server. They suggested adding lines to the .htaccess to lock down the wp admin pages to set IP. Is this a good fix? Changing the admin name is good (something I already did) but will not stop the attempted logins and the server spike.
 
ShadeDream said:
It's easier than you think and I'd rather do it through phpMyAdmin than through a plugin.

Code: 
http://www.wpbeginner.com/wp-tutorials/how-to-change-your-wordpress-username/
Click to expand...

Lol bro I have design many themes of wp for clients. And I know about tweak with mysql to change stuff. But seriously atm I am lazy as hell! :P
 
magguy said:
Great topic. My ISP took me off line after detecting the attack. It spiked the CPU on the server. They suggested adding lines to the .htaccess to lock down the wp admin pages to set IP. Is this a good fix? Changing the admin name is good (something I already did) but will not stop the attempted logins and the server spike.
Click to expand...

Sounds like a good fix to me but I'm not entirely sure. You'll probably still get hits, though that depends on what the bot is doing. Redirect all IP's but your one to somewhere else, like Google or something. It sounds like the guys at your ISP know what they are talking about.
 
This is the very reason why all the old users of WordPress don't use "admin" as username. I think this is the second security tip besides using a custom "db and table name".
 
BTW I have noticed that, Our posts show username on posts as author it can taken as bad for our site too!
 
Keep the admin username, set up an easy to guess pass like 123 or so, then make it a regular user (not admin privileges) so bots are happy to login but cant do much with your site.

Last time (almost an year ago) my sites hosted on different hosting were all hacked. Lucky i had backups and restored everything (took me a few days). Now i use completely new hosting providers, have backups and am waiting to see what's going on. I do believe top hosting providers (not the cheap one you pay $1/mo) should protect us.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top