My WP hacked

[yasser37]

Hi all


some stupid hacker changed my site's homepage

I just want my home page back

I will give my ftp info to the guy willing to help if he's trusted

+

If he can increase my security I'll really happy


thanks

yasser37 Reviewed by yasser37 on 28th Nov 2009. My WP hacked Hi all some stupid hacker changed my site's homepage I just want my home page back I will give my ftp info to the guy willing to help if he's trusted + Rating: 5

[Whoo]

Some more information would be good. Are you on a shared host/ VPS/ Dedicated server?

[yasser37]

well my friend bought me this assuming it's a reseller plan

[yasser37]

if anyone is willing to help I will gladly give ftp info

I also have a back up from nov 17th

tried to get my site back to that date but didn't work

[mmuyskens]

Sounds like its an SQL injection, do you have access to phpmyadmin or similar? I would suggest digging into the database.

[Voltar]

Well, it really could have happened many different ways. Your personal credentials could have been compromised/brute-forced, Your reseller's credentials could have been compromised (e.g. you're using a cPanel server and the server admin didn't disable the ability to login to accounts with the root or reseller password), or even the entire server could be compromised. It could have been caused by a vulnerability in a script or wordpress plugin, the possibilities are literally endless.

Your best course of action would be to make a backup of everything right now, and restore your previous backup (you do have one right? ). Then change all your passwords, and start looking through your logs to see if there is anything suspicious.

[shadow.prx]

reupload the index.php and delete index.html looks like the only defaced it

[yasser37]

I don't really know

as I mentioned I don't know the plan am currently on as it was a gift from a friend

I can provide cPanal info if needed too

[mmuyskens]

You have IM?

[yasser37]

reupload the index.php and delete index.html looks like the only defaced it

I tried looking for index.html but couldn't find it
as for plugins I didn't put any except a Contact Us plugin as I remember
I tried taking my site back to the backup but the index page didn't change yet

btw

all topics are still there

it's only the home page


http://arab-coderz.net/?p=317

PS:

I JUST TRIED TO LOGIN to my http://arab-coderz.net/wp-login.php
ad the password is wrong!


something big is going on here