• Hey guys hope all of you having an amazing day,

    my website got hacked, I found a code in .htaccess I deleted it but the next day it was there again, and before that, I found the new file I also deleted it but it came again.

    my website is working fine. but when I type site:watermadness.com in google I get so many pages that are not mine.

    This is the code that I keep deleting and it keeps getting back

    RewriteRule ^.*-(\d+)-.*.jsp$ toolo/index\.php?id=$1&%{QUERY_STRING} [L]
    RewriteRule ^brand/(.*)/\d+$ toolo/index\.php?cat=$1&%{QUERY_STRING} [L]
    RewriteRule ^.*(web[a-z]+indexer\.xml)$ webindexer/$1 [L]
    RewriteRule ^.*(sitemap\.xml)$ webindexer/$1 [L]

    • This topic was modified 4 years, 2 months ago by laith93.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • my website got hacked, I found a code in .htaccess I deleted it but the next day it was there again, and before that, I found the new file I also deleted it but it came again.

    That can mean either the attacker left some backdoor code allowing them to return anytime, or the original source of vulnerability that allowed them to get in the first time is still not patched.

    Please use the resources linked below to thoroughly clean up your website, and harden it against future attacks.

    FAQ My site was hacked

    Hardening WordPress

    Hi,

    I’m so sorry to hear that you have been hacked! Carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures and start backing up your site.

    Wish you the best!

    If you can’t fix things using the recommended guide, then look around for a professional service. There are quite a few options.

    You’ve received a notification from your security plugin of a breach or an unexpected change.
    Your hosting provider has warned you about unusual activity on your account.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘I am hacked plz help’ is closed to new replies.