WTF? Am I hacked or what?

I doubt you were hacked. who would go though all
besides you would know if you were REALLY hacked......you would have never been able to log into your admin panel with you "old" pasword.;)

Real hackers dont deface random fresh blogs ;)
 
I got rid of everything and downloaded wp again (may have been using an older version) and am reuploading with a clean theme.

You are using Hostgator right? Just use Fantastico to install Wordpress, you get the latest version and a clean install.

Plus is saves a lot of time ;)
 
Allright, to all who read this post, print or memorize this one.

EVERY time you get a wp template, spend some time and check the files, a LOT of really mean people inject BS in these templates. I learned this first hand when I found other affiliate links on my site.

When you download the theme, unzip and go to every file quickly and try to find some obfuscated code, you will know when you see it because it does not look like regular php for sure.

Also, sometimes there are files that end in .js these are javascript server side files that contain process that execute without you doing nothing, like sending a message to the owner of the template and he can install things in your footer, etc (like backlinks to their site). Again open your .js and see if you see things like code with other domains on it.

There are other threads in this forum that talks about always checking the wp templates because these issues.

Hope this helps!

There are .js files. How do I tell if they "connect"?
 
Back
Top