Image hacked
-
You need to start working your way through these resources:
http://codex.ww.wp.xz.cn/FAQ_My_site_was_hacked
http://ww.wp.xz.cn/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/Anything less will probably result in the hacker walking straight back into your site again.
Additional Resources:
Hardening WordPress
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.htmlThat’s great Esmi, you’re a star.
Have you heard of this particular problem?
Cheers,
Spencer
I have seen this recently, on sites where permissions are fine. is it some kind of bug with the latest wordpress verison? seems to be when comments are turned off on a post or hidden via css that the bots can get in to post…
@sap123: If you require assistance then, as per the Forum Welcome, please post your own topic.
This topic is about a hacked site and has nothing to do with any bugs in WordPress.
In the case of our particular problem, I had already removed the comments tags from the templates so that there was nothing for the bots to lock onto.
The image that was ‘hacked’ was also in a page rather than a post.
really, you know that 100% set in stone do you that this site has been hacked? that in this particular instance a site has been hacked even though all the folder permissions are correct?
@sap123: If you require assistance, post your own topic.
The site we built has all of the commenting functionality completely removed from all templates that generate pages – how else would 20 plus comments offering all manner of total crap appear in the WordPress backend?
Were you aware that many comment bots target the WP core comment script directly? Even if you have comments turned off, I’d suggest running Akismet.
The topic ‘Image hacked’ is closed to new replies.
(@spen)
12 years, 3 months ago
Hello there,
A client’s site seems to have been hacked and comments attached to an image within the site. All commenting is disabled.
I haven’t come across this kind of hack before – is anyone familiar with this and how it can be avoided in the future?
Cheers π