my wordpress blog was also once hacked... 
I checked my logs and what I see on daily basis that some script kiddies are trying to find every possible hole in my system by guessing, (like checking for online viewable passwd files.. trying to upload stuff) unformtunately some plugins are not secure and they are not updated so they might be a security risk - one plugin was insecure and someone uploaded a php virus to my blog and they changed the front page for googlebot only to display viagra stuff, for normal users the page was clean. the purpose for this was to get some backlinks.
at first I didnt know what to do, but then I did the following:
- check if all of your php files have a web only group. (not root!)
- chmod 777 or 775 only for files you really are sure they are secure and need the rights.
- you could write a script which works in the background and deletes files which are uploaded by the hackers.
- install "anti virus" plugin so it can check if some of your files on your blog are infected.
Edit history
Recommendations
0 members have recommended this reply (displayed in chronological order):
= new reply since forum marked as read