Forum Replies Created

Viewing 9 replies - 1 through 9 (of 9 total)
  • Thread Starter paul887

    (@paul887)

    The article you shared… of course!
    Wordfence offers this service too.

    Among all the info I was confronted with and my current tribulations, it slipped out of my awarenesses…

    Thanks Gerroald!

    From now on I will update things asap
    Lesson learned …

    Thread Starter paul887

    (@paul887)

    Probably the best place to find someone who would take care perpetually of my website would be hackers forums, but sadly I don’t possess the knowledge making me able to understand how competent someone is, not to mention trustable

    Thread Starter paul887

    (@paul887)

    Hi Gerroald,
    thanks for your time.

    My line “I started feeling depressed as it seemed that hackers didn’t care about my website” was a joke of course 🙂

    As you rightly say, I really don’t feel comfortable fiddling with my computer or my website, following mechanically instructions (which I’m not sure I’m rightly understanding) with no idea of what I’m doing.

    Hack repair service.
    Much appreciated advice.
    You won’t believe me, but I didn’t know about this option.
    This is my level in this area…

    Yesterday I found someone on peopleperhour specialised in malware cleaning.
    He is not only a freelancer but also leads a little company in England offering hosting services with 100% hack-free guarantee, so I guess he knows what he’s doing.

    I’m a little disappointed because I thought that my server provider (a2Hosting) would take care of security issues, as I have a managed account over there, which is not exactly cheap.

    My plan was/is to find a trustable freelancer and delegate him the perpetual security of my website.

    I inserted “hack repair service” in google and of course I was offered with a lot of results.
    Is there any specific important criteria I have to look at while filtering?

    Thanks again

    Thread Starter paul887

    (@paul887)

    Thank you Gerroald,

    I feel flattered that you think I could clean my website all by myself.
    No, someone is working on it.

    So, finally me too was compromised.
    I started to feel depressed as it seemed that hackers didn’t care about my website.

    Being a layman, when I get such issues I need someone who enters my Plesk or WP admin dashboard and take care of them.
    Even with the best Antivirus App, I don’t feel I can do it by myself.
    For example, when WF discovered those issues, it offered to delete files.
    I would never take that decision, as I’ve no idea what I’m doing.

    Does WF Premium Support enters my Admin Panels and work their magics, or do they support me just in explaining to me step by step what I have to do?

    Thread Starter paul887

    (@paul887)

    Thank you Felipe,
    TagDiv requires the Purchase Licence in order to register and enter their support forum.

    The Newspaper Theme was installed on WordPress by the developer.

    So, indirectly I paid for it, but I don’t have a Purchase License.

    So, I cannot get support from TagDiv.

    Is there anybody who can help me here?

    Thread Starter paul887

    (@paul887)

    Ok, job has been done,
    everything is fine,
    pleasurable experience with the freelancer from Dhaka, Bangladesh.
    Now it’s up to me to fill the blog with content…

    • This reply was modified 7 years, 1 month ago by paul887.
    Thread Starter paul887

    (@paul887)

    About the superadmin option, I just discovered something interesting:

    I just logged into a2hosting’s Plesk Onyx

    Over there my role is Owner.
    I have the possibility of giving other users the role of WebMasters.
    WebMasters have the capability of building website, but they cannot manage roles.

    It looks like this feature is the same as the superadmin feature

    Anyway, I won’t give the developer access to Plesk. He doesn’t need it.

    Thread Starter paul887

    (@paul887)

    I have created a second admin, with the name of the developer as his username and his own password.
    But with my email-address.

    Once he’s finished –> cancel his username –> Log out everywhere else –> change passwords.

    I feel comfortable with this procedure.

    (I haven’t find the superadmin option, but it’s not important.)

    ——————————-

    Just a couple of last questions, more out of curiosity:

    a) Can such a developer put malware inside my wp admin account?

    b) Can he delete or change pre-installed admin capabilities like in settings, tools etc.?

    c) Is it possible for him to install in my wp admin account some trick so that later, when after job’s completion I change the password, he gets in some way the new password?

    Thread Starter paul887

    (@paul887)

    @jackie
    @jnashhawkins
    @joyously
    Apologies for this delayed reply from me.

    “Actually, passwords are not visible”
    You are right! I haven’t noted it.
    This is helpful in my case

    “create a *separate* user for that person. You can do this under ‘Users > Add New’. The default role is ‘subscriber’, so don’t forget to change that to the role you want the user to have”
    I’m going to try

    “I think what I’d do at this point is to create a new admin user for myself and, when that other developer is done, I’d delete the older admin user.”
    You sure would.
    Problem is, with my zero-knowledge I’m extremely wary of playing around with creating, modifying and deleting admin roles.
    Probably at the end the only remained website admin would be the developer guy

    “You’ll want to make sure the email for the new admin is still pointing at your email.”
    Good advice
    I hadn’t think about that by myself

    “It might also be wise to change the Control Panel and database passwords to prevent him from ever getting access to those again.”
    I contacted a2hosting chat service yesterday and asked also about that.
    No problem now on this point

    “This person has a reputation to protect…”
    I chose one with around 300 reviews, 5 stars average. Normally there are no problems. But you never know

    “If there are multiple sessions, it will be enabled and say “Log Out Everywhere Else”. Click that, and then change the password.”
    This seems the most easy, quick and less problematic way.
    I saw this option, I just wasn’t sure if klicking it, only other users get logged out or “the other me” too.

    Before I mark this problem of mine as solved I want to play around some more in my wp dashboard and try out your tips.
    Thanks for the help to all the three of you.
    Very much appreciated

Viewing 9 replies - 1 through 9 (of 9 total)