|
Showing posts with label Hacking WordPress. Show all posts
Showing posts with label Hacking WordPress. Show all posts
PHP Script Injection Exploit in WordPress 2.7.1
I experienced my first site hack this weekend thanks to a warning message from Kaspersky Internet Security. When I logged into the admin panel of WordPress, it detected the gumblar.cn/rss/?* in my Firefox browser. After a little Google research, I found out that this was a PHP script injection that had found its way into many of the PHP files of my site, including the index.php and index-extra.php of the wp-admin folder, functions.php in the wp-includes folder, index.php in the wp-content folder, custom-functions.php in the Thesis theme’s custom folder, and even the main wp-config.php file in the root. The code was in the beginning of these php files, and started out as follows:
gumlar-exploit Even after removing the code from the above pages, I still encountered the same warning message from Kaspersky, which meant the injection was in even more php files. I decided that checking each php file was going to take a lot of time, so I downloaded a fresh installation of WordPress 2.7.1 and the Thesis Theme. I only saved my original wp-config.php and custom-functions.php files after removing the injected PHP script because of the custom settings and code within them. After the fresh installation, I still had the malware code on my site. The final folder that I didn’t check was my plug-ins. Sure enough, after I deleted all of my plug-ins, my site was finally free of the malicious code. In summary, these were the steps I took to remove the code from my site, which took about two hours: * Saving the original wp-config.php and custom-functions.php from Thesis after the removal of the script in the top line of the PHP * Downloading and installing a fresh copy of Wordpress 2.7.1 and my current theme, Thesis 1.5 * Deleting all plug-ins and re-installing them from inside the WordPress admin panel * Changing my WordPress and FTP login passwords to (hopefully) protect my site from further attacks I can say with certainty that if I had not upgraded earlier in the week to the new WordPress 2.7.1 and Thesis Theme that this cleanup process would have been much more difficult, simply because I would have been forced to do the full upgrade in the middle of dealing with the hack would have been even more stressful. Plus with previous WordPress versions, I would not have been able to simply search and install the new plug-ins through the admin panel – it would have been the download, unzip, upload, and activate. And with any other theme, I would have certainly lost my custom coding in all of the theme template files without a recent backup. Fortunately with Thesis, all of the custom PHP coding is handled in the one custom-functions.php file. I believe that the code was only on my site for more than four hours, as I had worked on my site earlier around 7pm, and did not receive the first warning message from Kaspersky until 11:30pm. Nonetheless, this goes to show that you should always make sure your antivirus and spyware programs are up to date, and that any coding customizations to your site should be saved often. Any website, trusted ones and even your own, is susceptible to unwanted surprise attacks. 10 Recommendations SEO for WordpressTruth is not a lot of SEO and the bad thing is that it is very important for any website. Finally, if you're one of mine do not know much about SEO but are keen to learn, you come to the right place. Today in Carlos Leopoldo expose us 10 recommendations SEO for WordPress. Which will help you a lot and so succeeded in learning something new and cool. SEO for WordPress recommendations are: 1 .- Plugin All In One SEO Pack. The IAEVG plugin is a plugin that basically allows us to customize the metatags of each of the pages and posts of our blog. Something absolutely essential. 2 .- Permalinks. It is recommended that the URLs only display the name of post, mostly because it concerned the question of whether they are more friendly. To do this put /% postname% / in the Links section of the permanent or Permalinks administration panel. 3 .- Sitemap. What use to register a sitemap to the search engines? This is a file containing all the available pages URL'so blog and therefore is more likely that Google will quickly identify and position. To generate a sitemap I recommend that you use the plugin Google XML Sitemaps which generates you automatically. Xml file, which is what you have to enlist in google webmasters and other search engines. 4 .- The headings. In any website is advisable to use the tag titles because Google gives more importance to what is between those tags. Other tags (H2, H3, etc.) you can use them to make nests in the structure of your posts.
|
