Removing admin access to developer question

  • Resolved zerodarkthirty

    (@zerodarkthirty)


    3 years, 1 month ago

    Hi there. I enlisted the help of a web developer to create a website for me. They had access to the account with admin privileges.

    I learned later than the developer got into some trouble with some of his clients related to money so I ended the relationship and changed the password to the only acct for the webpage.

    My question is this, if I changed the password is there any way this person could access my website through some other means? I am not a developer but I wasn’t sure if there was some third party app they may have installed that would allow them to access my website through some other means and make unwanted changes to the site.

    Thank you for any help

    • This topic was modified 3 years, 1 month ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic
    • This topic was modified 3 years, 1 month ago by Jan Dembowski.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Yui

    (@fierevere)

    永子

    When you offer someone full access, they can leave custom code “bookmarks” (or i can directly say – backdoors) to perform a custom functionality on their behalf.

    This means:
    You should not provide access to anyone whom you dont trust.

    What can you do:
    * Change all passwords you have provided to that person or remove account
    pay attention at: Hosting Panel and FTP passwords
    change Database password, they were able to access it in wp-config.php
    (update that file via hosting panel filemanager or FTP to use new database password)

    * Check what plugins you have installed,
    You can audit your WordPress installation integrity with

    https://www.ads-software.com/plugins/wp-cerber/
    It can verify if you are using original unchanged core files, plugin files and theme files and tell you about orphaned code, which may came from untrusted source

    Thread Starter zerodarkthirty

    (@zerodarkthirty)

    Thank you for the advice. This is very helpful! I never knew about bookmarks or back doors so I will definitely look into this. Thank you!

    Thread Starter zerodarkthirty

    (@zerodarkthirty)

    Resolved

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Removing admin access to developer question’ is closed to new replies.