Someone redirected my network to illegal shit

**xXXtesy10** · 07-07-2016, 07:56 AM

**teg0** · 07-07-2016, 08:01 AM

1. Keep Wordpress up to date.
2. Don't depend too heavily on plugins. It's plugins that are usually exploited.
3. Don't use any sort of pirated theme. If it's a premium theme, make sure it's one you've paid for and downloaded from the seller.
4. Hide the Wordpress version number from showing up in the source code. This keeps scripts from crawling around looking for a specific Wordpress version to exploit. (The Right Way to Remove WordPress Version Number)
5. Don't use Wordpress on sites that don't really need to be Wordpress.
6. Make sure you're not hosting with some noob company that has you on a shared server that isn't secured enough where someone else's site's exploit can effect your site too.

Sounds like you're doing the right things so it's probably just some plugin that has an exploit. Everyone is far too dependent on Wordpress, but I understand why. It's just easy pickings for exploits and traffic redirects.

**DVTimes** · 07-07-2016, 08:04 AM

Make sure your not using admin as your login.

**kurtov** · 07-07-2016, 08:09 AM

Originally posted by teg0

4. Hide the Wordpress version number from showing up in the source code. This keeps scripts from crawling around looking for a specific Wordpress version to exploit. (The Right Way to Remove WordPress Version Number)
6. Make sure you're not hosting with some noob company that has you on a shared server that isn't secured enough where someone else's site's exploit can effect your site too.

Man thanks.
The other stuff im already doing but,
Hiding Wordpress versions is a great idea. thanks for the link

I host with godaddy, who just hung up on me. Thinking about buying their security thing, dunno if its garbage or not.

**3xmedia** · 07-07-2016, 08:19 AM

lol using GD for hosting is retarded, it's even more retarded than using GD for domains

**Freedom6995** · 07-07-2016, 08:23 AM

Limit access via a .htaccess file in wp-admin

**kurtov** · 07-07-2016, 08:24 AM

Originally posted by Freedom6995

Limit access via a .htaccess file in wp-admin

This is a great suggestion. Thank you.

**kurtov** · 07-07-2016, 08:27 AM

Originally posted by 3xmedia

lol using GD for hosting is retarded, it's even more retarded than using GD for domains

Which host would you recommend?

**deonbell** · 07-07-2016, 08:43 AM

What type illegal stuff redirecting too?

I agree with protecting access to wp-admin with htaccess.

**j3rkules** · 07-07-2016, 08:54 AM

Originally posted by teg0

1. Keep Wordpress up to date.
2. Don't depend too heavily on plugins. It's plugins that are usually exploited.
3. Don't use any sort of pirated theme. If it's a premium theme, make sure it's one you've paid for and downloaded from the seller.
4. Hide the Wordpress version number from showing up in the source code. This keeps scripts from crawling around looking for a specific Wordpress version to exploit. (The Right Way to Remove WordPress Version Number)
5. Don't use Wordpress on sites that don't really need to be Wordpress.
6. Make sure you're not hosting with some noob company that has you on a shared server that isn't secured enough where someone else's site's exploit can effect your site too.

Sounds like you're doing the right things so it's probably just some plugin that has an exploit. Everyone is far too dependent on Wordpress, but I understand why. It's just easy pickings for exploits and traffic redirects.

Also create a strong passwords for your sites using ambiguous, lower and uppercase characters et cetera.

**kurtov** · 07-07-2016, 08:57 AM

Originally posted by jerkules

Also create a strong passwords for your sites using ambiguous, lower and uppercase characters et cetera.

Yes i do that. But totally noobiated on having admin as a user name. It's like we were beckoning hackers.

Someone redirected my network to illegal shit

Someone redirected my network to illegal shit

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment