Title: Index.php getting replaced.
Last modified: August 22, 2016

---

# Index.php getting replaced.

 *  [JLocke17](https://wordpress.org/support/users/jlocke17/)
 * (@jlocke17)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/indexphp-getting-replaced/)
 * Hello,
 * For last 24+ hours, some guy is automatically changing my index.php content. 
   I replaced it and fixed it many times, but this guy keeps doing it somehow.
 * I even changed file permission and changed all credentials. But he even changed
   the permission of files and edited the index.php.
 * The site has lot of posts and comments. I don’t want to lose anything.
 * Please help. How do I fix it?
 * Thank you.

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [RossMitchell](https://wordpress.org/support/users/rossmitchell/)
 * (@rossmitchell)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/indexphp-getting-replaced/#post-5324822)
 * First backup your database.
    Change your passwords, cpanel, FTP, WordPress. Look
   at your access logs. Which PHP files are being accessed. There are some checklists
   here “I have been hacked” follow the steps.
 *  Moderator [bcworkz](https://wordpress.org/support/users/bcworkz/)
 * (@bcworkz)
 * [11 years, 8 months ago](https://wordpress.org/support/topic/indexphp-getting-replaced/#post-5324902)
 * I don’t know if this is the link Ross intended, but it’ll do. [FAQ My site was hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked).
   The guy can keep changing your file because he installed a “[backdoor](http://ottopress.com/2009/hacked-wordpress-backdoors/)”
   somewhere.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Index.php getting replaced.’ is closed to new replies.

## Tags

 * [hacked](https://wordpress.org/support/topic-tag/hacked/)
 * [index](https://wordpress.org/support/topic-tag/index/)
 * [index.php](https://wordpress.org/support/topic-tag/index-php/)

 * In: [Hacks](https://wordpress.org/support/forum/plugins-and-hacks/hacks/)
 * 2 replies
 * 3 participants
 * Last reply from: [bcworkz](https://wordpress.org/support/users/bcworkz/)
 * Last activity: [11 years, 8 months ago](https://wordpress.org/support/topic/indexphp-getting-replaced/#post-5324902)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics