Wordpress Themes - WP Forum at BFA
Click here to register or to donate.
Auto self-registration is not available here - far too many spammers. This forum has many, many backlinks and because of that there is an intense desire among spammers to drop their links here.

Wordpress Themes - WP Forum at BFA » WordPress Themes » Atahualpa 3 Wordpress theme »

Site Hacked? New lines in header.php, and added login.php, ip.php and convert_ip.php

Old Oct 22, 2014, 04:47 PM
10 posts · May 2010
My site was hacked. The hacker had added lines to the header.php file that produced links and other text (some english, some appeared to be russian) at the top of pages. Also added three files named above.
I've removed the lines and the files. Header lines are gone.
Embarrassing part, I was still running Atahualpa 3.4.6
Looking into plugin called "System edit restriction" -- as another tool to fight hacks.
Old Oct 22, 2014, 04:49 PM
juggledad's Avatar
23,713 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
check all user id in wordpress
check all FTP accounts
change ALL your passwords: WP, FTP, EMAIL< CPANEL
run antivirus software on your computer

and I would do a full reinstall of the WP code, all plugin's and themes just incase they left some backdoor code in somewhere.

and look at this plugin Sucuri WordPress Security plugin

and upgrade the theme WP and all plugins
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support

Last edited by juggledad; Oct 22, 2014 at 04:53 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
Thread Thread Starter Forum Replies Last Post
My site was hacked ScalableSite Web Hosting for WordPress 1 Dec 22, 2013 03:49 AM
My site got hacked - please help rinoa3108 Atahualpa 3 Wordpress theme 15 Oct 27, 2011 04:23 AM
My site has been hacked - atahualpa 3.4.6 Mikii New Versions, & Updating 11 Jun 17, 2010 09:09 PM
My site's been hacked! paulae Installing & running WordPress 3 Sep 13, 2009 08:34 PM

All times are GMT -6. The time now is 03:28 PM.

Powered by vBulletin® Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.