Viewing 8 replies - 16 through 23 (of 23 total)
  • Godaddy is getting hit hard over at twitter about this attack. for those hosting with them stay updated (sample) @godaddy get your crappy server config straight. Stop blaming WordPress. https://www.ads-software.com/development/2010/04/file-permissions/

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    Someone else mentioned to me that ALL your files may be infected. From your WP core files to plugins to themes.

    Good news? It’s NOT the database!

    Bad News? You basically need to rip out your files and reupload everything fresh PLUS change your passwords.

    I am up and running per go daddy I still have just a little glitch i.e photos will not upload. dashboard takes longer than usual to load. but everything else seems to be working well, change pw as advised, here is GD response

    Thank you for contacting the Hosting Security Team.

    We have checked and confirmed that your hosting account xxxxx had php files which contained a javascript malware injection. We have since removed the contaminated code as a (courtesy). Please note, that this is not a permanent solution because it does not remove the vulnerability that allowed the malicious code to be inserted.

    To address the specific vulnerability, please ensure that you fully upgrade all installations of web based software such as WordPress or Joomla to the most recent version.

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    Out of curiosity, how do you generally update files?

    I mean, I use SSH nearly exclusively, but when I use SFTP it’s either Transmit or Cyberduck. Which FTP apps are you using, and are they secure FTP?

    If its Ftp your talking about Ipstenu I use filezilla. good or bad?

    Moderator James Huff

    (@macmanx)

    As long as you’re connecting with secure FTP (sFTP), rather than standard FTP, you’ll be fine. Standard FTP is one of the least secure protocols around today. Most hosting providers offer sFTP access, but you may have to ask them to enable it first.

    Thanks mac, and I am going over to Blue Host just got off the phone with them I have had it with GoDaddy my site is sill down after they so called cleaned it. Now my dashboard is all screwed up and my editor Upload/Insert doesn’t work. it’s one big mess

Viewing 8 replies - 16 through 23 (of 23 total)
  • The topic ‘why does my admin page look like this…’ is closed to new replies.