Mass Wordpress hack attacks
 

thats bad, gotta check my sites

wow thats disturbing man!!! :(:(:(

Makes me glad I don't run WP on my blogs, being so popular big target for hackers.....

fixes:

http://www.getrichslowly.org/blog/20...sultsnet-hack/

http://it.youtube.com/watch?v=Obqa6jDV-WQ

http://ocaoimh.ie/2008/06/08/did-you...te-get-hacked/

i´m gonna check my site!

goddamnit...

wordpress is the script kiddies dream

uh oh .....

I'm sick of this fucking shit, having to upgrade once a week on a shitload of blogs is a serious pain in the ass...let's talk about alternatives...

Also, would limiting server and mysql access to only my IP address solve this problem, or is there a way to hack through it?

nice post ... thread bookmarked!

i agree, and they way of updating is a fucking pain in the ass... some kind of automatic update system is really needed.

What do you use, Im use going to start learning blogging and would rather invest my time in something that isnt buggy and easy to fuck with.

There is a Plugin called "Wordpress Automatic Upgrade" and it works well I've been using it for few upgrades now no errors/bugs.

said it before and will say it again: "running wordpress = waiting to get fucked in the ass".

I noticed last week my google traffic to my Anaheim Ducks blog was off, but figured was due to the offseason, but it turns out this exploit was probably the case. I found a bunch of invisible gambling links in my index page. Now I've patched and cleaned the site back up but have to 'request review' with Google to get back to clean status hopefully. Which sucks, since for many terms I'm #1-3 on Google above sites like NHL and TSN and AnaheimDucks.com :disgust

BTW this site may be helpful for those wishing to check links to any badware, since Google/Stopbadware.org aren't very helpful when they block you.

http://www.bad-neighborhood.com/text-link-tool.htm

...and automatically creating blogger/blogspot blogs is a solid business practice? :winkwink:

since adult links are considered bad - it's not useful around these parts.

It can still find hidden links in your page like it did for me. ie. I know I don't link to any gambling sites from my hockey blog, so when it found like 200 direct links that all sounded gambling related, that's how I was alerted to the hack (then did a quick DB search to find the posts they were inserted in).

Do you happen to have that request review link? I had a blog dropped a few months back because the motherfucker was double pinging somehow.

So....alternatives anyone?

in your themes also check your header.php file.

Here is the link:
https://www.google.com/webmasters/tools/dashboard

One of my sites was hacked, I had to upgrade wordpress, and edit each post and remove links. I then submitted my site for google review and warning was removed within 24 hours. Now I am back where I was in google prior to the hack.

I also bookmarked, A ton of my sites have been hacked and thrown out of results. Very depressing.

bump other options than wp?

bump, this sucks

Hit me on ICQ (see sig) can show you backend and talk further there.

thanks :)

yea i know of a few big guys gettin hacked with cialis linx

It is a good idea to save your blogs using the export function to your local hard drive regularly

It feels like it always something. I spent a good chunk of the end of last week going through all of my blogs and altering things so comments are no longer allowed at all due to just the total flood of blank comment spam I was getting.