iocchelli

Add one more to the list of those needed to revert to 1.7.1.

Add me to the list of sites having this problem. My website

I would advise you:

1. attempt to export your database
2. delete all your wordpress installation files, backup your wp-content wp-config.php and .htaccess files.
3. upload fresh wordpress files
4. restore your database

Once you have done that, see if you can login and edit normally. This will not mean you are ‘clean’ but it will mean you have started the process.

I would advise you to change your admin password right after you have followed these steps as it sounds like this hacker has set things up so he is collecting your login and password.

Yes, that sounds very suspicious.

I think what I’d try is:

1. if you can, change your theme to the ‘default’ one provided by wordpress (it is likely your theme is infected).
2. back up your custom theme
3. upload fresh copies via ftp of all wordpress files.
4. login and see if you can do the export from within using the fresh install files.
5. Assuming you were successful, edit your them OFFline until you are satisfied the infected code has been removed.
6. upload the newly cleaned up theme.

I just set my dozen blogs up with Subversion (SVN). I’m not good using shell but SVN absolutely rocks. You may want to use that instead of the auto upgrade feature.

Nevermind, I found a pretty good article that answers my question.

I was pretty close to correct but please read the article if you have the same problem.

If you were hacked in the fashion it sounds like you have, you are going to need to access your mysql dbase. Do you have phpadmin access? You will probably want to check for odd users in your user table.

That doesn’t sound good. Do you have another way to edit the templates outside WordPress? e.g. using Cpanel or a similar control panel?

I was hacked and there was no way I would have cleaned things up without backend admin access.

You beat me to it. I was just about to post that exact code. ?? Good going!

actually, thinking on this some more, there are two index files – one at the root of your WP installation, and one in your theme. If it is the one in your theme, you’d have to get a copy of the theme index file and replace that one.

No. The index file as at the root of your WordPress installation. Your template is inside the wp-content/themes folder.

Ok,

You would have page.php with sidebar1.php in it. Then, you make page-alternate.php (or another name of your choice) that includes sidebar2.php.

NOW, when you create a new page in WordPress, the default template will be page.php. but you can select page-alternate.php from right within the editing area for the page.

You select your template in that ‘attributes’ section below the publish button in the right side of the page editing window.

You can do this on a page by page basis. Does that make sense?

And now you are slow again. If the site loads super quick one minute and super slow the next minute, I think it must be a server thing.

I loaded your site a few times and it was super fast. Now it
s really slow again. This is not WordPress – there is something else going on.

From the WordPress download link

Download the file, extract/unzip it, and there will be an index.php file in the folder.