Getting Site Working After hack incident

wp_coder
(@wp_coder)

14 years, 2 months ago

I helped a customer move a hacked site from one host to another. I’m getting “page not found” errors. Going to the admin section, it shows (110) Pages ALL … etc…

Everything seems to be functioning normally from a WP standpoint as far as the WP installation itself, but then when I go to the PAGES SECTIONS, it shows none of the pages even though it says at the top there are 110 of them. I’m assuming because his site was hacked there was link injection of bad IP’s and invalid URL’s (overwrote relative URL with absolute URL – the hacked one). It’s hard to tell since the injected URL’s are now dead and just come back as Page Not Found.

Anyone know where the injection likely exists that causes this problem (pages from the WP_POSTS to not show up in admin section), in otherwords, what do I need to change back to fix this?

Viewing 5 replies - 1 through 5 (of 5 total)

Moderator t-p
(@t-p)

14 years, 2 months ago

-Try resetting your custom permalinks back to the default setting and renaming your WordPress .htaccess file.
-If that works, then try reading Using_Permalinks before setting a custom permalink structure again. Documentation: http://codex.ww.wp.xz.cn/Using_Permalinks

PZimmerman
(@pzimmerman)

14 years, 2 months ago

I’m the owner of the site being referred to. I never did any custom permalinks – at least not intentionally. Could this have something to do with the theme I’m using.

2010 Weaver with simple silver sub-theme

I do see this on the theme page of the admin panel.

<<set to selected sub-theme>>Please note: Changing sub-theme will replace all current “Main Options” settings, plus “Advanced Options” Predefined Theme CSS Rules settings. Other “Advanced Options” settings are not changed. (You can save all current settings from the Save/Restore tab).

Would we need to reset to my selected sub-theme after moving it from another site?

Here is the permalink of one of the pages.

Permalink: http://paulzimmermanroses.com/?page_id=762

We can see the pages in the WP Jump Menu bar at the top of the admin panel. They come up fine and I can edit them but when we try to preview it we get the “page not found” on the actual site.

Thread Starter wp_coder
(@wp_coder)

14 years, 2 months ago

Tried most of this already…

I tried changing permalink settings back and forth. I went into the database and ran a query to change all occurrences of IP addresses directly to his domain name. I also added a new page, and even when adding a new page it doesn’t show up in the pages list (only shows it exists overall 112 pages instead of 111 pages now), but I never can access any of the pages themselves.

I think it is something somewhere in the database the hacker modified something.

Moderator t-p
(@t-p)

14 years, 2 months ago

review:

http://codex.ww.wp.xz.cn/FAQ_My_site_was_hacked
http://ww.wp.xz.cn/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/
tutorial how to fix hacked WP blog: http://www.jtpratt.com/how-to-fix-a-hacked-wordpress-blog/

Then implement tips of this guide: http://codex.ww.wp.xz.cn/Hardening_WordPress

Malware Scan

muzahid_cu_
(@muzahid_cu_)

14 years, 2 months ago

We can see the pages in the WP Jump Menu bar at the top of the admin panel.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Getting Site Working After hack incident’ is closed to new replies.

Getting Site Working After hack incident

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics