pattycake22

i’m pretty sure Duplicator is more of a full-blown “copy all” app. I was trying to do something similar (just copy pages) and never figured it out. If I remember correctly Updraft would work. Maybe JebBackup

could also be a hacked site… scan the server. THen install Wordfence

use cpanel or whatever to phpadmin the database. Go to the users table, find the admin and you’ll see their email address. You might try changing it but that might cause “autentication” issues.

I myself would find the admin username, find the password and edit it
1. Type in the new password in the?user_pass?column to change it, then make other changes as needed.

2. Change the?Function?value of your password to?MD5. This is used to add an additional layer of security.

Then go login to the site with the new password

Lots of good advice here but this is what I would do to debug this:

Thru cpanel (or ftp), use the File Manager in cpanel, go to the wp-content folder, and then under that, go to the themes folder, find the folder of the theme that is causing the error… rename that folder to something like “theme_name.bku”. ie: If the name of the theme is “Astra”, rename it “Astra.bku”. Then fire up WordPress. Since wp can’t find your active theme, it’ll grab another. If it fires up, the theme is the issue. If it DOES NOT fire up, it’s a plugin

Updraft is good – I like Duplicator better. Make the backup, then download it and the install app to a local pc. Only issue you miht have down the line (year or so from now)is that some of your existing plugins might not get upgraded to whatver version of Wrdpress, php, mysql, etc that you;ll be installing to in the future. So when you go to re-install, you start getting errors about “not compatable”. Understand? But there’s no way to get around it – who knows what will stil be here a year from now.

I used to use Backup Guard – now I use Duplicator – works great

add the FREE version of Wordfence and sleep well – I was hacked nuerous times before I installed Wordfence – none since. Sweet and simple – install the defaults and you are good to go.

I actually have two apps installed – Securi. I like a little of that one, and a little of this one. I’m told not to install both but I’ve been running for over a year with no issues (or worries)

no advertising on the Duplicator that I just installed

It worked fine with my free version

update – they caved and gave me the ip address

The Indonesian IP that accessed your KH account via the portal was this:

103.108.33.113

they won’t tell me… it took forever to get them admit that it came thru the billing portal – wouldn’t provide any logs that I could look at ,,, I think it was a wakeup call to their security that it happened.

it was restored. hack came from Indonesia ip that came thru the billing portal and re-provisioned the server.

thank you

Thank you

>Having multiple security plugins at the same time can actually work against each other with different conflicts and make your site weaker.

I like Sucuri’s alert system better – they notify of both failed and successful logins. The reason Wordfence might not be alerting could be because Sucuri is grabbing them before Wordfence. I’ll disable Sucuri and see if it alerts as well as Sucuri. Thanks for the reply.

btw: the hack was due to a hacked cpanel access and then using File Manager to upload the malware – not via the site itself so my confidence in Wordfence is again renewed. All cpanel passwords have been changed to those that are generated by the system – no more simple passwords.

We can consider this post as “solved, resolved, and closed”… until next time ??

• This reply was modified 1 year, 8 months ago by pattycake22.