Wordpress stealth hack

[Brujah]

Wordpress sites are being hacked by the hundreds, and you may not even realize that yours is too if you host on any number of shared servers (Network Solutions, Dreamhost, GoDaddy, etc...).

http://www.wpsecuritylock.com/breaki...-on-dreamhost/

[halfpint]

Thanks man bump for more awareness

[SGS]

Wordpress = fucking nightmare.

[CunningStunt]

Where there's a will, there's a way.

Any mass software solution is going to be hit sooner or later. Stinks, but it's inevitable.

Thanks Brujah. Now I remember why I let a 100 domain experiment die on its ass.

[fris]

thats what you get for hosting on a shitty web host, serves them right

[seeandsee]

Wordpress sites are being hacked by the hundreds, and you may not even realize that yours is too if you host on any number of shared servers (Network Solutions, Dreamhost, GoDaddy, etc...).

http://www.wpsecuritylock.com/breaki...-on-dreamhost/

thanks for notice

[LoveSandra]

Wordpress = fucking nightmare.

sometimes , yes

[CPimp]

That friggin sucks.

[bloggerz]

its only on shared hosting? so blogs on dedicated servers aren't being affected?

[V_RocKs]

Wonder if it is the same shitheads that did the big attack last time.

[ottopottomouse]

Thanks for that. Can't find any with a problem

[Why]

has anyone found one of these websites or is it just dreamhost bashing?

considering the source is a person who makes money selling WordPress security software and knowledge

[TheDA]

has anyone found one of these websites or is it just dreamhost bashing?

considering the source is a person who makes money selling WordPress security software and knowledge

I wondered the same to be honest. I haven't seen a site listed that's been hit yet.

[TheDA]

Dreamhost, network solutions, godaddy are all being hit, all kinds of php sites. Not exclusive to wordpress at all.

Do you know of any that have been hit by any chance?

[Brujah]

On wordpress.org forums there's a list of people who claim their sites were hacked.
http://wordpress.org/support/topic/396524?replies=1

Add BlueHost to the list of shared hosts. Also, this doesn't seem to be exclusive to wordpress, but sometimes other .php files on the servers.

[Dirty Lord]

Wordpress = fucking nightmare.

dont say that

[icymelon]

cant you set wordpress to only let your ip login?

[harvey]

the attacks are on Apache, not WordPress, that's why it only works on shared hosting. They attacked WP, ZenCart, Drupal and almost any PHP file at sight. Thing is WP has millions of users, hence you'll see "WP is under attack". Or do you expect to see "some custom php script is under attack"? geez, some people

Quite curiously, you'll rarely see "some idiots at shared hosting have no clue about what they're doing", and in 99% of cases that is the issue.

[harvey]

cant you set wordpress to only let your ip login?

yes you can with some easy custom mod. However, the attacks were from inside the server, so how do you stop that? Last time, when the NetSol fiasco shown up (1 month ago or so) it was proven they had a rogue admin that changed permissions to allow access to account. Same with GoDaddy hosting. How do you plan to stop that?

[Davy]

I have no problems with my php sites on Dreamhost.

[Argos88]

This is a sever config problem.. NOT Wordpress....

[TheDA]

I checked all my WP stuff on shared earlier and it was OK!