my wordpress site is giving me hacking message

Discussion in 'Security' started by pakidesigner, Nov 1, 2010.

  1. #1
    i need a suggestion,

    my site

    http://11cricket.com/

    is showing a stupid message.

    and my wordpress login not working on this. but i have hold on hosting cpanl and domain password.


    i need a suggestion.

    what should i do in this situation.
    i seen that site is as it is in the hosting. but landing page is changed.

    i think a hacker entered in the site by

    http://11cricket.com/wp-login.php

    my questions are

    if i change wordpress database password in phpmyadmin of my cpanel. is that OK?

    or should i delete this site and install new word press from fantascio delux.

    thank in advance.
     
    pakidesigner, Nov 1, 2010 IP
  2. sahmothers.com

    sahmothers.com Well-Known Member

    Messages:
    2,389
    Likes Received:
    33
    Best Answers:
    0
    Trophy Points:
    135
    #2
    Yes
    and
    No

    No need to delete it, it's most likely a html file that is being called. Change the password and then check the files. Also update to the latest version of Wordpress. If you need help in securing your site from now on let me know

    www.geekforhim.com/portfolio/
     
    sahmothers.com, Nov 1, 2010 IP
  3. pakidesigner

    pakidesigner Peon

    Messages:
    310
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #3
    thanks buddy,


    i recovered my password by going to that link.
    http://11cricket.com/wp-login.php?action=lostpassword

    now the issue is that i am logged in but how i change the landing page by wordpress.

    it is updated to latest version.

    i think i should find it in cpanel hosting, can any one tell me which is the file where i can edit that code.

    i checked in index.php but there is nothing such written there.



     
    pakidesigner, Nov 1, 2010 IP
  4. gopkris2000

    gopkris2000 Peon

    Messages:
    86
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    You need to check wordpress unwanted plugins and your site theme, also disable unwanted 777 permission for your website.
     
    gopkris2000, Nov 2, 2010 IP
  5. pakidesigner

    pakidesigner Peon

    Messages:
    310
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #5
    thanks buddy it worked.
    when i clicked the other theme it showed the website.

    i think this theme have some malicious code. so what should i do of this theme.


     
    pakidesigner, Nov 2, 2010 IP
  6. gopkris2000

    gopkris2000 Peon

    Messages:
    86
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    You need to consult with your theme provider and it may some coding issue.
     
    gopkris2000, Nov 3, 2010 IP
  7. pakidesigner

    pakidesigner Peon

    Messages:
    310
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #7
    yes my friend i know this is the issue, because when i changed the theme it worked perfectly.

    i wonder how it happened and how people do such type of things.

    he changed my "admin" name also
    and kept his name as khaled as admin.





     
    pakidesigner, Nov 3, 2010 IP
  8. tanmoyg

    tanmoyg Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    You may want to reset your mod_security values to a better one
     
    tanmoyg, Nov 6, 2010 IP
  9. BeardConstance

    BeardConstance Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    re install your word press system.ans use a boot system or plugins that arrived spam and hack best of luck.also try google search with your problem
     
    BeardConstance, Dec 20, 2010 IP