Someone put pharmacy links in my blog....how do I get rid of them!?

Discussion in 'Websites' started by Kevin T Perry, Jul 17, 2009.

  1. #1
    Somehow my site has been hacked and someone has put up an erectile dysfunction link at the top of my wordpress blog and a Tamiflu link at the bottom.

    First of all, how did they do that? And second, how do I get rid of it? I can't find them anywhere in the Wordpress editor.

    Thanks in advance,

    Kevin
     
    Kevin T Perry, Jul 17, 2009 IP
  2. theapparatus

    theapparatus Peon

    Messages:
    2,925
    Likes Received:
    119
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Link please. Probably the code has been added into either in your theme files or your wp-config.php file.
     
    theapparatus, Jul 17, 2009 IP
  3. bright-eyed

    bright-eyed Guest

    Messages:
    52
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Did you figure it out? That sounds pretty scary.
     
    bright-eyed, Jul 17, 2009 IP
  4. Kevin T Perry

    Kevin T Perry Peon

    Messages:
    1,065
    Likes Received:
    41
    Best Answers:
    0
    Trophy Points:
    0
    #4
    the site is www.tsxtalk.com

    I just noticed it today...and the site as been up now for a month or more.

    Edit: I just checked the site. The link at the top is gone and the link at the bottom has changed to a casino link. I even changed my password before it changed. What the hell is going on??
     
    Kevin T Perry, Jul 17, 2009 IP
  5. theapparatus

    theapparatus Peon

    Messages:
    2,925
    Likes Received:
    119
    Best Answers:
    0
    Trophy Points:
    0
    #5
    That link is physically within your addtoany script when you look at the page source within your browser. Best bet would be to contact them and ask about it.

    Things to double check though before contacting them:

    - Turn off the plugin and see if the link(s) goes away.

    - Skim through the plugin and see if anything has been added to the file(s).

    Hope this helps,
    -drmike
     
    theapparatus, Jul 17, 2009 IP
  6. Kevin T Perry

    Kevin T Perry Peon

    Messages:
    1,065
    Likes Received:
    41
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Thanks for your help....I'll check the plugin

     
    Kevin T Perry, Jul 17, 2009 IP
  7. theapparatus

    theapparatus Peon

    Messages:
    2,925
    Likes Received:
    119
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Not a problem. Just for reference and as a learning experience, this is what I'm seeing:

    <div id="copyright">
    			(c)Copyright TSXTalk.com All Rights Reserved. | <a href="http://www.goodcasino.biz/">Casinos</a><script type="text/javascript">
    a2a_localize = {
    	Share: "Share",
    	Save: "Save",
    	Subscribe: "Subscribe",
    	Email: "E-mail",
    
    etc....
    
    Code (markup):
    May want to check the theme's footer.php file as well.

    Considering that addtoany has a sponsors page, that would be my first guess. Followed by the theme being hacked.

    Good luck
     
    theapparatus, Jul 17, 2009 IP
    Kevin T Perry likes this.
  8. Kevin T Perry

    Kevin T Perry Peon

    Messages:
    1,065
    Likes Received:
    41
    Best Answers:
    0
    Trophy Points:
    0
    #8
    I think it may be the theme, cause it's happening on another site I have with the same theme. Looks like i'm going to have to change themes.

    Thanks,

     
    Kevin T Perry, Jul 17, 2009 IP