• rellison

    (@rellison)


    This seems to happen at least once a month and its getting old. There are 8 wordpress sites that we host on our shared server account. When the site gets hacked or script run every wordpress install get effected. Every index.php file gets deleted from every directory. The only way to fix it is to re-upload the last back of the site. The I have to screw with a couple of plugin’s since they had been updated since the backup.

    All of the sites passwords have been changed and get changed monthly same for FTP access.

    How to I find what is causing this and how do I fix it so it doesn’t keep happening. it wastes about 6 hours of time each time it happens..
    I’m really perplexed by this..

    Thanks in advance

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator t-p

    (@t-p)

    Carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    hackrepair

    (@hackrepair)

    Situations like this are usually caused by one of a few things:

    1. Administrator password compromised.
    Be sure to set only one admin account and others to Editor. Change passwords as well.

    2. Exploitable plugins.
    Be sure to delete all not required and inactive plugins. Update all to the latest version, and be careful in noting any premium type plugins and checking to see if you have the latest version of those as well.

    3. Exploitable themes.
    Be sure to delete all not required themes, so as not to leave any hidey holes for hackers to hide their stuff.

    4. Check your hosting account and be sure to delete all extra FTP accounts. Change your main hosting account password and primary FTP account as well.

    These are the basics. Otherwise, try any of the numerous security plugins available in the repository to see if they find anything suspicious.

    Best Wishes in your quest to secure your website!

    • This reply was modified 7 years ago by hackrepair.
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Sites hacked all wordpress index.php files deleted.’ is closed to new replies.