Wordpress Themes - WP Forum at BFA
Click here to register or to donate.
Auto self-registration is not available here - far too many spammers. This forum has many, many backlinks and because of that there is an intense desire among spammers to drop their links here.

Wordpress Themes - WP Forum at BFA » WordPress Themes » Atahualpa 3 Wordpress theme »

Site Hacked? New lines in header.php, and added login.php, ip.php and convert_ip.php


  #1  
Old Oct 22, 2014, 05:47 PM
ewlong
 
10 posts · May 2010
My site was hacked. The hacker had added lines to the header.php file that produced links and other text (some english, some appeared to be russian) at the top of pages. Also added three files named above.
I've removed the lines and the files. Header lines are gone.
Embarrassing part, I was still running Atahualpa 3.4.6
Looking into plugin called "System edit restriction" -- as another tool to fight hacks.
  #2  
Old Oct 22, 2014, 05:49 PM
juggledad's Avatar
juggledad
 
23,576 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
check all user id in wordpress
check all FTP accounts
change ALL your passwords: WP, FTP, EMAIL< CPANEL
run antivirus software on your computer

and I would do a full reinstall of the WP code, all plugin's and themes just incase they left some backdoor code in somewhere.

and look at this plugin Sucuri WordPress Security plugin

and upgrade the theme WP and all plugins
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support

Last edited by juggledad; Oct 22, 2014 at 05:53 PM.

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
My site was hacked ScalableSite Web Hosting for WordPress 1 Dec 22, 2013 04:49 AM
My site got hacked - please help rinoa3108 Atahualpa 3 Wordpress theme 15 Oct 27, 2011 05:23 AM
My site has been hacked - atahualpa 3.4.6 Mikii New Versions, & Updating 11 Jun 17, 2010 10:09 PM
My site's been hacked! paulae Installing & running WordPress 3 Sep 13, 2009 09:34 PM


All times are GMT -6. The time now is 08:21 PM.


Powered by vBulletin® Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.