• Resolved tajanator

    (@tajanator)


    I was hacked and thousands of web pages were injected into my host server files. I removed some of them and my site went down. I am not sure if I deleted an htaccess file by accident or what… but I now get all 404 pages both when typing in specific urls to pages, posts, and even when i go to the domain/wp-admin page.

    How do I fix the wordpress install without deleting my database (which I HOPE is still untouched)? I am afraid to uninstall / reinstall wordpress because I don’t want to delete my files if they are salvageable. ***fingers crossed***

    PLEASE HELP! My site host doesn’t seem to have any answers for me, they just suggest the site be reverted to a backup but the last backup was from a long time ago so I would rather not loose all of my recent posts and stuff.

Viewing 8 replies - 1 through 8 (of 8 total)
  • There is some great information on what to do and how to get started in the event of a suspected intrusion/hack here: “.. carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures. ”

    Thread Starter tajanator

    (@tajanator)

    Ok… yea that guide doesn’t really answer any of my questions.

    For instance… it suggests to log into MyPHPAdmin to bypass wordpress, but without instructions on how to do this. However,… When i use the PHPadmin on my host server, it doesnt show any of my current posts and pages, it only shows my old backup files. So it isnt reading current database information, it is only reading the SQL from the newest backup. These are not the same things, unfortunately.

    So, instead of forwarding me to another useless help index page, can you please re-read my first statement and questions, and we can start over please?

    So, instead of forwarding me to another useless help index page, can you please re-read my first statement and questions, and we can start over please?

    Sorry you feel that way. I read your issue… You’re hacked. The same basic tenets apply to your situation, as is described in the information I linked you to.

    A) “How do I fix the wordpress install without deleting my database”

    You begin by replacing ALL of your files with the contents of your last known good backup, and then see where you’re at. That means assessing whether or not there is any database involvement in your particular compromise, and if so, continuing on from there.

    “it suggests to log into MyPHPAdmin to bypass wordpress”

    Yeah.. under certain circumstances, phpMyAdmin is one of a number of tools available to you if you need to repair your administration login credentials, but you’re quoting that back to us out of context (and probably frustration) in this case.

    B) ” When i use the PHPadmin on my host server, it doesnt show any of my current posts and pages, it only shows my old backup files. So it isnt reading current database information,

    phpMyAdmin is a database administrative tool. You can import, or export data, but it doesn’t show “backup files”. It only displays database information.

    “it is only reading the SQL from the newest backup”

    If that’s the case, then that must mean someone else has already (tried to, or) restored the database from a backup.

    Please take a few minutes to grab a favorite beverage and go back and thoroughly read the information I pointed you to. I understand it’s a frustrating situation, but the long and short of it is, you’re probably going to need to start by replacing all of your WordPress site files from your last known good backup, then assess the condition and performance of the site from there, and determine whether or not you need to fix your database. I’m afraid there aren’t any shortcuts.

    [edit] ..Just to clarify: all of your posts, pages and comment content is stored in your database. None of that content is stored in file format anywhere on your site, or in your files.

    Thread Starter tajanator

    (@tajanator)

    Ok, that is fine. My hopes and reasons for asking these questions is that I wanted to get onto my wordpress to see if any of my new stuff was still there – stuff that hadn’t been backed up yet. I would love to just revert to an old backup if I hadn’t had a son SINCE the last backup and don’t want to lose his entire first year in posts, etc.

    I wanted to get into my wordpress files, since they still exist on my database, before wiping my site. I wanted to do a backup from wordpress if available, as some suggestions seem to instruct. I am fairly certain that the only thing currently preventing me from accessing my site is that some file here or there is corrupt. Hence why I asked if i could fix the install of wordpress without deleting database files in the process.

    You seem to be focusing on the fact that i was hacked as a no-hope and therefore situation-write-off and nothing can be done situation. I don’t believe that this is the case. Until I have exhausted ALL POSSIBILITIES, I refuse to wipe my website, and my son’s entire life, from my personal family website.

    I am not trying to take any “shortcuts” I am just hoping -beyond hope- that someone with wordpress would be willing to assist me since they are knowledgeable in this stuff, being with tech support, rather than just keep pointing me to a page full of much more information than what *might* answer my questions.

    Yes, you are damn right I am “frustrated”.

    I’ll be honest, I read no further than this:

    I wanted to get into my wordpress files, since they still exist on my database,

    Your files and your database are two, separate, distinct entities.

    Your files do not exist on or in your database. Your files reside in your public_html directory. They do nothing but act as a template for displaying the contents of the database.

    All of your posts, your page contents, your comments, and your site settings are stored in the database, not in your site files.

    You can replace all of your site files without touching the database. However; that doesn’t mean that the database won’t be affected by the hack.

    PLEASE be careful to read an understand the differences between the two, before proceeding.

    Thread Starter tajanator

    (@tajanator)

    Omg, you keep assuming that I don’t understand. Yes. I know that the database files are separate. That is actually why I am so frustrated. If i could just view and backup my pages and posts because they were all laid out in front of me then I would have done that. Since they are not, since they are database files, then i need to backup my database! Since i have no access to my database because i have no access to my wp-admin, I have asked for assistance…detailed in the last comment I made.

    Please read past the line that you admit to stopping at.

    Omg, you keep assuming that I don’t understand….
    …Since i have no access to my database because i have no access to my wp-admin, I have asked for assistance..

    You do not access your database through your WordPress Dashboard. You do not need access to your WordPress admin area to backup or restore your database.

    You normally access your database(s) through your hosts control panel. From there you can use the database administration tools provided (phpMyAdmin, MySQL Admin, etc.. whatever they provide for you, and whichever you prefer) located in your hosts control panel.

    You seem to be focusing on the fact that i was hacked as a no-hope and therefore situation-write-off and nothing can be done situation…

    I’ve done no such thing. I’ve attempted to help you regain control of your site by directing you to vital information that is designed to do just that. I’ve also tried to help you understand why “replacing your files” is not the same as “wiping your website”, and how your database is where your content is actually stored.

    If you have customized themes, or plugins, but no backups of your files, then yes… those will not be recoverable if lost. Sometimes you might find that your web host does automatic backups, and may actually have a previous copy of your files stored somewhere – but I wouldn’t count on it. Still, it’s worth asking them about, but I never for one second suggested to you that it was “no-hope and therefore situation-write-off and nothing can be done situation.”

    You may find at some point it becomes safer and more expedient to consider hiring the services of individuals who specialize in security issues and cleaning up compromises. You can find frequent references to many of them here in the forum conversations, but I’m not comfortable suggesting or singling anyone out in this discussion.

    Thread Starter tajanator

    (@tajanator)

    You know what, I figured it out on my own. The info in your guides were no help put I found a way to export the current database SQL info into my PHP then created a backup, reloaded the site, and had my htaccess file repaired by my host.

    None of my stuff had been deleted, like I suspected, I just didn’t know how to find the SQL info in my FTP to save it.. which if I had reverted my site as you had suggested would have been lost.

    Thanks anyway

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Hacked. Now get 404 page for posts wp-admin. Can wordpress files be fixed?’ is closed to new replies.