So you like Wordpress... then you want to be careful

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Dennis69
    Confirmed User
    • Feb 2003
    • 1685
    #1

    So you like Wordpress... then you want to be careful

    It looks like somebody hacked wordpress on one of my blogs and put a script on the bottom of 1000s and 1000's of my pages on one of my dedicated servers, it will take me forever to remove it from all the pages... the script is redirecting all my traffic from free sites, gallery pages and so much more to this url.

    http://jxp2dve.com/?prvtof=8b2VkUqfX...JePkd0tw%3D%3D
    Last edited by Dennis69; 02-02-2008, 06:45 AM. Reason: Edited so I wouldn't end up in jail before the day was out!!!!
    HaHaHa
    Tags: None
    • Miguel T
      ♦ Web Developer ♦
      • May 2005
      • 12470
      #2
      Might have been a host problem , not a wordpress problem.

      Full Stack Webdeveloper: HTML5/CSS3, jQuery, AJAX, ElevatedX, NATS, MechBunny, Wordpress

        Comment

        • Nicky
          Too lazy to set a custom title
          • Mar 2003
          • 30071
          #3
          urgh, you sure it was wordpress? I don't like the sound of it, better try and up the security on it in some way

          gfynicky @ gmail.com

            Comment

            • rowan
              Too lazy to set a custom title
              • Mar 2002
              • 17393
              #4
              Probably not the best idea to be posting direct links to pages that were inserted by hackers, it's not hard to imagine what they might do to an unpatched/holy MSIE.

              Do you run any other scripts on the server?

                Comment

                • dstaff
                  Confirmed User
                  • Oct 2005
                  • 198
                  #5
                  there's pretty much a security hole in every version of wordpress...public and 0day..not much you can do...

                  anything helps though

                  www.grsecurity.net <- harden your kernel
                  http://www.modsecurity.org/ <- harden apache and php
                  We Do Content Marketing pure and simple.

                    Comment

                    • AliGbone
                      Confirmed User
                      • Sep 2004
                      • 547
                      #6
                      yea wordpress if full of vulnerabilities gots to lock it down if your going to use it
                      I'm not Ali A, not Ali B, Ali C, Ali D, Ali E, Ali F... but... Ali G!

                      Booyakasha!!!!
                      Need Content? ADULTCENTRO ROCKS! ADULTCENTRO.COM

                        Comment

                        • directfiesta
                          Too lazy to set a custom title
                          • Oct 2002
                          • 30184
                          #7
                          Originally posted by AbsolutePorn
                          Might have been a host problem , not a wordpress problem.
                          he is dedicated ....
                          I know that Asspimple is stoopid ... As he says, it is a FACT !

                          But I can't figure out how he can breathe or type , at the same time ....

                            Comment

                            • HairToStay
                              Confirmed User
                              • Oct 2002
                              • 1521
                              #8
                              What version of Word Press was "hacked?"
                              Make bank by giving your surfers free pics every day and it costs you NOTHING! Use POTD Sponsors to find adult sponsors in more than 75 niches who offer a POTD feature!

                                Comment

                                • V_RocKs
                                  Damn Right I Kiss Ass!
                                  • Nov 2003
                                  • 32451
                                  #9
                                  You probably have an ancient form of wordpress unseen in years.

                                    Comment

                                    • BlackCrayon
                                      Too lazy to set a custom title
                                      • Jun 2003
                                      • 19634
                                      #10
                                      As long as you install updates right when they come out, you should be fine.
                                      you don't know you're wearing a leash if you sit by the peg all day..

                                        Comment

                                        • Pornopat
                                          AdultTubeSubmits.com
                                          • Dec 2003
                                          • 10598
                                          #11
                                          Originally posted by directfiesta
                                          he is dedicated ....
                                          It can still happen...
                                          https://stripcash.com/sign-up/?userI...fff832eb95ab6a

                                            Comment

                                            • directfiesta
                                              Too lazy to set a custom title
                                              • Oct 2002
                                              • 30184
                                              #12
                                              Originally posted by Pornopat
                                              It can still happen...
                                              then it is not the host fault, as the original poster implied ... people don't read here ... or what ?
                                              I know that Asspimple is stoopid ... As he says, it is a FACT !

                                              But I can't figure out how he can breathe or type , at the same time ....

                                                Comment

                                                • u-Bob
                                                  there's no $$$ in porn
                                                  • Jul 2005
                                                  • 33063
                                                  #13
                                                  Running wordpress is a disaster waiting to happen.

                                                    Comment

                                                    • Dennis69
                                                      Confirmed User
                                                      • Feb 2003
                                                      • 1685
                                                      #14
                                                      Originally posted by BlackCrayon
                                                      As long as you install updates right when they come out, you should be fine.
                                                      Best of luck with that... you almost need to be there hitting refresh because they are always updating the damn thing
                                                      HaHaHa

                                                        Comment

                                                        • BlackCrayon
                                                          Too lazy to set a custom title
                                                          • Jun 2003
                                                          • 19634
                                                          #15
                                                          Originally posted by Dennis69
                                                          Best of luck with that... you almost need to be there hitting refresh because they are always updating the damn thing
                                                          There hasn't been an update in over a month.
                                                          you don't know you're wearing a leash if you sit by the peg all day..

                                                            Comment

                                                            • Pornopat
                                                              AdultTubeSubmits.com
                                                              • Dec 2003
                                                              • 10598
                                                              #16
                                                              Originally posted by directfiesta
                                                              then it is not the host fault, as the original poster implied ... people don't read here ... or what ?
                                                              It can be the hosts fault wheater or not he is dedicated. Several dedicated boxes can be connected to each other.
                                                              A piece of php on one of the boxes or an outdated piece of software (besides wordpress) can do the trick.

                                                              People dont think here or what?
                                                              https://stripcash.com/sign-up/?userI...fff832eb95ab6a

                                                                Comment

                                                                • directfiesta
                                                                  Too lazy to set a custom title
                                                                  • Oct 2002
                                                                  • 30184
                                                                  #17
                                                                  Originally posted by Pornopat
                                                                  It can be the hosts fault wheater or not he is dedicated. Several dedicated boxes can be connected to each other.
                                                                  A piece of php on one of the boxes or an outdated piece of software (besides wordpress) can do the trick.

                                                                  People dont think here or what?
                                                                  fine, it is the host fault ... have to leave ... going to nightcourses ....
                                                                  I know that Asspimple is stoopid ... As he says, it is a FACT !

                                                                  But I can't figure out how he can breathe or type , at the same time ....

                                                                    Comment

                                                                    • Pornopat
                                                                      AdultTubeSubmits.com
                                                                      • Dec 2003
                                                                      • 10598
                                                                      #18
                                                                      Originally posted by Dennis69
                                                                      It looks like somebody hacked wordpress on one of my blogs and put a script on the bottom of 1000s and 1000's of my pages on one of my dedicated servers, it will take me forever to remove it from all the pages... the script is redirecting all my traffic from free sites, gallery pages and so much more to this url.

                                                                      http://jxp2dve.com/?prvtof=8b2VkUqfX...JePkd0tw%3D%3D

                                                                      I have had a similar problem. The host helped me with a custom solution that repressed this code. So the code became useless. It was a temporary solution because the moment the hacker redirects it to another url you will have to change your costumsolution as well. It helps you buy time to find the security hole though.
                                                                      https://stripcash.com/sign-up/?userI...fff832eb95ab6a

                                                                        Comment

                                                                        • papill0n
                                                                          Unregistered Abuser
                                                                          • Oct 2007
                                                                          • 15547
                                                                          #19
                                                                          Uggg thats sucks Dennis. Good luck sorting that nightmare out mate.

                                                                            Comment

                                                                            • mrkris
                                                                              Confirmed User
                                                                              • May 2005
                                                                              • 2737
                                                                              #20
                                                                              Wordpress is crap. The code base is clunky, the plugin architecture is sub par and its slow as sin.

                                                                              PHP-MySQL-Rails | ICQ: 342500546

                                                                                Comment

                                                                                • BlackCrayon
                                                                                  Too lazy to set a custom title
                                                                                  • Jun 2003
                                                                                  • 19634
                                                                                  #21
                                                                                  Originally posted by mrkris
                                                                                  Wordpress is crap. The code base is clunky, the plugin architecture is sub par and its slow as sin.
                                                                                  Whats the alternative?
                                                                                  you don't know you're wearing a leash if you sit by the peg all day..

                                                                                    Comment

                                                                                    • tony299
                                                                                      lurker
                                                                                      • Aug 2002
                                                                                      • 57021
                                                                                      #22
                                                                                      this is why Im thinking of getting a separate server or a virtual account to start to play with wp. To have my server that pays my mortgage fucked up wouldn't work for me.

                                                                                        Comment

                                                                                        • Chio
                                                                                          Confirmed User
                                                                                          • Oct 2002
                                                                                          • 8002
                                                                                          #23
                                                                                          Check the div for class=goro in your source or something like that. There are a number of ways to remove it (it's a single include file). Search google.

                                                                                          If you use autoblogger simply use rewriter to replace eveything within the goro div with a blank space.

                                                                                          I seo'd my hair yesterday and today it's pr7!
                                                                                          RIP Texas Dreams

                                                                                          Are you a content producer or program owner sick of tube sites? Contact me on ICQ: 39-183769

                                                                                            Comment

                                                                                            • Chio
                                                                                              Confirmed User
                                                                                              • Oct 2002
                                                                                              • 8002
                                                                                              #24
                                                                                              Here's the link to remove the infection if it's the goro injection:

                                                                                              http://blog.kakkoi.net/wordpress/how...class-mailphp/

                                                                                              I seo'd my hair yesterday and today it's pr7!
                                                                                              RIP Texas Dreams

                                                                                              Are you a content producer or program owner sick of tube sites? Contact me on ICQ: 39-183769

                                                                                                Comment

                                                                                                Previous template Next
                                                                                                Working...