Title: hacker created users
Last modified: August 21, 2016

---

# hacker created users

 *  [qwertyjjj](https://wordpress.org/support/users/qwertyjjj/)
 * (@qwertyjjj)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/hacker-created-users/)
 * somehow I had an admininstrator added to my site even though I have WP-security
   installed.
    It seems like they created an admin entry and then started created
   thousands of users. However, I cannot find any users, only my userId in the tables
   is now at 1,000,0000+ Any ideas how I can fix this in the tables? 1001002 NULL
   $P$BAmfCtSm60L2oHjjw6DDbiyn2tvRch0 2014-07-09 15:44:57

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Kye](https://wordpress.org/support/users/gmax21/)
 * (@gmax21)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/hacker-created-users/#post-5083498)
 * Hey there.
 * Did you figure out how they did it yet?
 * Rogue plugin? Something in a theme? Dodgy past admin?
 * If you haven’t then maybe you’ll want to start there otherwise you could waste
   time fixing up the DB only to find they’ve done it again.
 * Checking plugins and themes are updated, no extra files, no extra code in files
   is a place to start. Sucrui could also help:
 * [https://sucuri.net/](https://sucuri.net/)
 * As for restoring, you don’t have a backup do you?
 * That would be the quickest. Else your issue is knowing which UIDs are genuine
   and which are fake. If they’re all admin you could run a query to remove them
   but just be sure to make an exception for your UID and any other genuine ones.
 * There is also a plugin that might help there:
 * [http://wordpress.org/plugins/bulk-delete/](http://wordpress.org/plugins/bulk-delete/)
 * Looks like a premium add-on in order to bulk delete members though.
 * Hopefully this will be of some use.
 * Take care.
 *  Thread Starter [qwertyjjj](https://wordpress.org/support/users/qwertyjjj/)
 * (@qwertyjjj)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/hacker-created-users/#post-5083514)
 * No idea how it was done as I cannot check logs with the host.
    It seems like 
   only the user ids were increased but no actual users created apart from one admin
   user with a blank login. I’ve tried to secure wp-admin using WP-security but 
   it messes up all the logins on the main site.
 *  Thread Starter [qwertyjjj](https://wordpress.org/support/users/qwertyjjj/)
 * (@qwertyjjj)
 * [11 years, 11 months ago](https://wordpress.org/support/topic/hacker-created-users/#post-5083516)
 * I have a backup but this will miss some customers who have ordered things since.
   
   How can I reset the userids but also have the new orders/customers linked to 
   relevant posts from woocommerce?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘hacker created users’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 2 participants
 * Last reply from: [qwertyjjj](https://wordpress.org/support/users/qwertyjjj/)
 * Last activity: [11 years, 11 months ago](https://wordpress.org/support/topic/hacker-created-users/#post-5083516)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics