Save Draft Requires Password?

  • I just went to write up a post and clicked “save draft” and a browser pop-up for a sign in shows up with the following text:

    ‘
    A username and password are being requested by https://www.mydomain.com. The site says: “Magic”
    ‘

    MyDomain.com is obviously different, but that’s what the popup says, and it has a user name and password field. When I click cancel, a white page shows up with “access denied.”

    I noticed that a random user was in my database from a couple days ago, and deleted the entry, but that has me a little worried that there’s a security issue here? I changed the passwords on all of my signins and ran the wp-security-scan plugin, but I can’t figure out what’s going on. This wasn’t happening a couple days ago.

Viewing 5 replies - 1 through 5 (of 5 total)

  • youre hacked.

    see this thread:

    https://www.ads-software.com/support/topic/295482?replies=47

    Thread Starter burningoak

    (@burningoak)

    Well shoot…

    So to clarify, overwriting wp-includes/ and all of my plugins should take care of this issue? Is there any consensus on why it occured in the first place?

    Overwriting plugins and wp-includes/ might sort out the problem.

    In most cases people have reported that it makes the password requester go away.

    Personally, if it had happened to me, I wouldn’t be satisfied with just making the box go away, and I’d check through my entire site for signs of hacking. Probably following https://codex.www.ads-software.com/FAQ_My_site_was_hacked and the sites it links to.

    Which version of WordPress are you running?

    Thread Starter burningoak

    (@burningoak)

    I’m on 2.8.2. Just overwrote all of wp-includes, and deleted all of my plugins and reinstalled.

    I’m also not comfortable with just that, but I’m not sure where to proceed from here. I’ve changed passwords and all that, but I’m not sure where this came from.

    The pages linked from the Codex article give some good ideas on how to try to look for the attacks. (Checking log files etc.)

    If you were on 2.8.2 before this hack took place, it suggests it was probably not the comments XSS hack, as that was fixed.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Save Draft Requires Password?’ is closed to new replies.