host4profit

Did you happen to lose all your posts? Or were those still there? I had a client report sort of the same issue. Their admin login was changed, along with the name of the blog and email address. But, all their posts were lost. I believe an attacker managed to re-run the install.php via a remote POST.

David

ERROR:
Warning: Cannot modify header information – headers already sent by (output started at /home/xxx/public_html/blog/wp-content/plugins/wordpress-blog-stat/stat.php:37) in /home/xxx/public_html/blog/wp-includes/pluggable.php on line 865

Check out:

https://www.ads-software.com/support/topic/282103?replies=5

That seems have the same error message with some suggestions for resolving.

Hello,

Yes, t31os_, that is my bigger concern. The POST to the install.php file. As far as I can see, the WordPress documentation doesn’t state to remove the install.php file, but it certainly makes sense to do it.

But I am trying to confirm this is how the attacker corrupted this blog, but somehow managing to POST back to the install and make it look like it was a fresh install, in turn, wiping everything out.

David

Smart RSS does not work properly with 2.3 The three tables that were removed are using by this plugin.

Is there a good replacement? I tried feedwordpress, but that only imports to a single category and doesn’t do quite as nice of a job as Smart RSS did.

David