ilione

An update…

Well, two of my wordpress 2.2 sites have now been hacked four times.

My permissions are all 644 or 755, I updated the xmlrpc, I checked my plugins (only use 3) changed every password I could think of — and checked for any odd files/scripts. I still keep being hacked :o/

In the access logs and you can actually see these guys logging into my wordpress, I have no idea how they’re deleting the admin user in the database and adding themselves first though — but it’s happening every time.

I’m just lost, one of these sites is my business and it’s so useless at the moment

Does anyone have any suggestions?

Thanks

Ok here’s something possibly weird.

When I changed back to an old mysql database in cpanel, I noticed that there was an IP under access hosts on the account maintenance screen.

When I looked up the IP it was a blueyonder user (an ISP over here in the UK)

Does this mean that someone has been accessing my mysql with a remote host type thing? and if so, wouldn’t they have needed my domain passwords to set it up/use it?

If that’s the case then they must have hacked my domain/hosting account and got in that way, as apposed to it being through wordpress.

I’m super confused now! and still no word from my host…

It won’t even let me delete the remote access IP from my account grrr

Hey! Thanks for the reply,

Yeah, I did notice that the page was free of evils or I wouldn’t have left it up =) I just wanted people to be able to see what it looked like as there have been no confirmed reports of 2.2 hacks on here yet that I can see? I did have a good snoop before I posted.

I also wanted my host to see it… they still haven’t got back to me yet =/ I’ve started working on making it look normal again now anyway, too impatient!

My permissions are cool but thanks for the heads up on the xml-rcp! Just updated it on all my installations =)

Update:

Not heard from the host yet but I managed to install an older sql database and get back into it. Going to change the password there and on my host now!

Will leave the main page as it is just so you can see it and let you know what my host has to say when they get in touch.

Brilliant! Thanks petit, will delve in now lol

x

Well I found the part in httpd.conf for apache that you need to tweak for it to see a .php file as index aswell as .hmtl

<IfModule mod_dir.c>
DirectoryIndex index.php index.html
</IfModule>

I *think* that should stop you seeing the directory listing and just give you the error

Did you add the stuff to your apache conf for php?

You should have this somewhere (mines slapped at the end of the addmodule section)

AddType application/x-httpd-php .php

and I think there was something else needed tweaking in there, should be in the docs

Hope some of that helps

Ilione
x

petit, OP said it was to use some plugins that were only compatible with 1.5

CompleXed: I suggest you wait for the plugins to be upgraded or look for other plugins that do the same job. Most plugins have been upgraded or are in the process :o)

Ilione
x

Hang on, just read you post about index.php again lol

Apart from apache not opening index.php seems like you are having a php problem (i’m great with powers of deduction huh? hehe)

There must be something with your php/apache misconfigured :o)

Sorry can’t be more help without poking at it! I’m a poker, not a brain :o.

Ilione
x

have you got apache set up to use .php files as well as .html?

Sounds like WP is working fine but not loading up index.php

Click on it in the directory it brings up and that should show you your blog :o)

Ilione
x

you need to download the latest wordpress and follow the instructions to install it to your webspace (you’ll need FTP or some other access to upload your files)

It really is quite simple, you need only make one database called WP or similar in cpanel or whichever system your host uses and you’re away :o)

Maybe your host provides installation help

Ilione
x

Sorry, for which of the three and where? :o.

Thanks for the reply :o)

x

Anyone who knows a little CSS awake yet? :o)

Still getting up my nose… I’ve been at it for the last 48 hours (with sleep of course) lol

x

I’d also recommend FileZilla and K2! taquil, your page is stunning

x

Im confused, but that’s not hard to do lol

1) I have mine on main page but that’s where I installed it to instead of /wordpress/ directory. How did you ‘tweak’ it?

2) Not used permalinks before… sorry I’m no help there.

3) Could you save your data, do a fresh install of WP 2.0 in your root directory and then add your data? That’s what I’d do, but that’s because atm I don’t know what you’ve tweaked and I’ve also seen some peope have probs updating.

I’m sure someone else knows more!

x

I’m a freeware freak hehe

GIMP for images, NVU for WYSIWYG CSS/HTML design editing, I also have Apache, PHP, MYSQL, PERL etc installed for local editing (same stuff XAMPP offers by the looks!)

Also use various free stock photo websites where nice people actually upload great images for free use! :o)

x