Hesham Fathi

To use coupons with WooCommerce.

Go to: WooCommerce > Settings > General > Enable coupons
Tick the checkbox to Enable the use of coupon codes.
Save Changes.

also is there any plugins that might help me to prevent this from happening again ?

but even if someone stole my password there is still other WP installations on the same domain name with different admin passwords and it was hacked too through writting on the php files , so it doesn’t make sense at all

It seems like Hostgator not secured VPS server , so can you please recommend me with a good one that you have used previously and had a good experience with them ? I’m currently thinking of Bluehost but i don’t know

I have a VPS on Hostgator and for the first time the site is hacked i cleaned it up but and the server responded to my ticket with this:
“
Hello,

It appears that your WordPress password was stolen and used to upload malicious files onto your account. We have now removed all malicious files and reset your WordPress admin password(s):

AdminURL: https://xxxxxxxx/wp-admin
Username: xxxxx
Password: xxxxxx

You will need to update all of your outdated software to the latest version as soon as possible to ensure the safety and security of your account. If you are seeing a warning page in your browser (Firefox, Chrome, Safari), please follow the directions on the following page to get rid of the red warning page: https://www.google.com/support/webmasters/bin/answer.py?answer=45432 . If these directions are not followed, this page will continue to show up for quite some time.

Please keep in mind that it is your responsibility to ensure the security of your account(s). If we detect another account compromise or you request for us to scan the account for malware within 6 months of this notification, we reserve the right to assess an Account Cleanup fee before performing any scans or removing malware from the account. In cases where a 3rd party reports malicious content or actions to us, we also reserve the right to disable the site to protect the integrity of our network.

============TIMESTAMPS=============
File: `/home/sportvps24/public_html/readingbetweentheseams/wp-includes/Text/Text.php’
Size: 145633 Blocks: 288 IO Block: 4096 regular file
Device: 24h/36d Inode: 155454364 Links: 1
Access: (0644/-rw-r–r–) Uid: ( 504/sportvps24) Gid: ( 512/sportvps24)
Access: 2014-03-06 11:11:44.000000000 -0600
Modify: 2014-03-06 11:11:44.000000000 -0600
Change: 2014-11-25 17:13:53.518938872 -0600

============ACCESS LOG=============
88.166.217.47 – – [25/Nov/2014:03:33:16 -0600] “POST /wp-content/themes/twentytwelve/404.php?act=f&f=license.txt&ft=edit&d=%2Fhome%2Fsportvps24%2Fpublic_html%2F HTTP/1.1” 404 25361 “https://sports-kings.com/wp-content/themes/twentytwelve/404.php?act=f&f=license.txt&ft=edit&d=%2Fhome%2Fsportvps24%2Fpublic_html%2F” “Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0”
88.166.217.47 – – [25/Nov/2014:03:33:42 -0600] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 76 “https://sports-kings.com/wp-content/themes/twentytwelve/404.php?act=f&f=license.txt&ft=edit&d=%2Fhome%2Fsportvps24%2Fpublic_html%2F” “Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0”
88.166.217.47 – – [25/Nov/2014:03:34:36 -0600] “POST /wp-content/themes/twentytwelve/404.php? HTTP/1.1” 404 25287 “https://sports-kings.com/wp-content/themes/twentytwelve/404.php?act=ls&d=%2Fhome%2Fsportvps24%2Fpublic_html%2F&sort=0a” “Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0”
88.166.217.47 – – [25/Nov/2014:03:34:48 -0600] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 76 “https://sports-kings.com/wp-content/themes/twentytwelve/404.php?” “Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0”
88.166.217.47 – – [25/Nov/2014:03:35:30 -0600] “POST /wp-content/themes/twentytwelve/404.php HTTP/1.1” 404 25283 “https://sports-kings.com/wp-content/themes/twentytwelve/404.php” “Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0”

===========CLEANED FILES===========
removed `/home/sportvps24/public_html/readingbetweentheseams/wp-includes/Text/Text.php’
removed `/home/sportvps24/public_html/wp-content/themes/twentyfourteen/content-time.php’
removed `/home/sportvps24/public_html/passthepill/wp-content/sedlex/inline_scripts/27132e18cbb2bd79309b02659e004829.php’
removed `/home/sportvps24/public_html/wp-content/themes/twentytwelve/js/theme-js.php’
removed `/home/sportvps24/public_html/phxsportskings/wp-content/themes/twentytwelve/inc/sysinc25o.php’

Best regards,

Cody
Senior Security Administrator
HostGator.com LLC
https://support.hostgator.com

”