My 2.1 site hacked… not 2.1.1

• 

  cmcgrath · Member · Apr 2, 2007 at 5:50 pm

  • Copy link
  • Add topic to favorites

  My 2.1 WordPress site was hacked on Saturday, and I still haven’t been able to fix it: http://www.chrismcgrath.com.

  All my content is still there when I go to /wp-admin/, but nothing happens when I publish new posts. I just get this “praise allah” web site.

  My non-wordpress content is still there (i.e. http://www.chrismcgrath.com/index_old.php?bosnia).

  I’m using 2.1, not the 2.1.1 that had the security problem.

  Any ideas? How should I go about fixing, and then removing the vulnerability? (My web space is with http://www.he.net.)

• 

  mark · Member · Apr 2, 2007 at 5:51 pm

  • Copy link

  1. Delete index.php at site root. That will stop things for now.

  2. Post to http://wordpress.org/support for more help.

• 

  trent · Member · Apr 2, 2007 at 6:03 pm

  • Copy link

  You will also have to delete index.html at the site root as well as they have it there as well.

  Trent

• 

  cmcgrath · Member · Apr 2, 2007 at 6:16 pm

  • Copy link

  okay, i deleted index.php. the site showing now is my old old one, still gotta get my newer posts from the DB.

  sorry for posting here, i didn’t understand the difference between wordpress.com/.org.

• 

  drmike · Member · Apr 2, 2007 at 6:17 pm

  • Copy link

  It’s covered in teh Please read me first sticky at the head of the forums. You’re at a webhoster. The software site is over at the wp.org