Fix a Hacked blog

Discussion in 'Programming' started by sethuhdiah, Dec 11, 2007.

0
  1. #1
    sethuhdiah, Dec 11, 2007 IP
  2. GTL

    GTL Banned

    Messages:
    857
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #2
    Open the template/theme editor in Wordpress and remove this code from whatever template it is is (I think it's the header template);

    <META HTTP-EQUIV="Refresh" CONTENT="3;URL=http://www.turkhacking.phpnet.us">
    PHP:
    Delete that code and it wont go to that hacked page anymore :)
     
    GTL, Dec 11, 2007 IP
  3. sethuhdiah

    sethuhdiah Well-Known Member

    Messages:
    1,651
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    130
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #3
    I am having trouble locating the file that has that code in it. I've check most index.php and header.php files
     
    sethuhdiah, Dec 11, 2007 IP
  4. Seiya

    Seiya Peon

    Messages:
    4,666
    Likes Received:
    404
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #4
    Does your file include any unusual javascript or any other unusual file? Check all includes in your template files.
     
    Seiya, Dec 11, 2007 IP
  5. sethuhdiah

    sethuhdiah Well-Known Member

    Messages:
    1,651
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    130
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #5
    alright I found the easiest fix.
    This is the fix "Hacked By Undead" TurkHacking wordpress blog hack

    log into your mysql db
    reset my admin pw with regular md5 encryption(they hacked it)
    delete most recent post that they created which has the title: "<META HTTP-EQUIV="Refresh" CONTENT="3;URL=http://www.turkhacking.phpnet.us">"

    done

    thanks
     
    sethuhdiah, Dec 11, 2007 IP
  6. ven123

    ven123 Banned

    Messages:
    389
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #6
    I am interested in working on this. Please PM me.
     
    ven123, Dec 12, 2007 IP
  7. n-james

    n-james Well-Known Member

    Messages:
    1,367
    Likes Received:
    70
    Best Answers:
    0
    Trophy Points:
    165
    As Seller:
    100% - 0
    As Buyer:
    100% - 0
    #7
    Can't you see the site is already fixed?
     
    n-james, Dec 12, 2007 IP