Website Hacked… writing appearing above website.

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Before i started to do anything i downloaded a maintenance plugin so people couldn’t see my site till i got it fixed. i accidentally logged out when trying to view it and now i can’t get back inot my website and i can’t see anything. Just the site maintenance page. :/

My email and password are no longer working to reset a password.

Any ideas?

I seriously need help…. please.

FTP into your site (or use whatever file management application your host provides) & rename the maintenance plugin’s folder inside wp-content/plugins to see if that helps.

Log in to your hosting
Log in to phpmyadmin
Go to the database for your website
Click on wp-users (normally on the left)
You will see a user with an ID of 1. This SHOULD be you.
click “inline edit) and edit the fields
ID = 1
user_login = your login name (anything except for admin)
user_pass = (go to….
user_email = your email

If you can access https://www.t9imagesmedia.com/wp-admin then try and log in again.

@taidgh: no reason to go to a hash site to get a MD5 hash. Type the new password in the user_pass field and then select MD5 from the drop down menu and then “Go.”

Guys,
I’ve had this issue as well. Not sure if they just phished my password or what. I’ve changed it. I found some weird stuff in my theme files I deleted, but still have an ad for onlinecasino-games.com/poker/ I don’t want.
link is statdude @ com

Any ideas on how to remove the ad from the top of all my pages?

Thanks!

You weren’t hacked, it was from a plugin you installed. See this post for more information;

https://www.ads-software.com/support/topic/my-site-deface-link-integrated-on-my-homepage