admin section of site is showing NO images, background or otherwise

I’m having the same problem. I didn’t change anything, and then all of a sudden my dashboarded looked like yours, but now it looks like this:

https://www.bluelotusmedia.com/wp-content/uploads/2010/11/Picture-5.png

I was already running wp 3.0.1, although I did a reinstall which fixed it for about 5 minutes, and then it went back to the screenshot above.

Now, I can’t reinstall through the updates panel. It says it can’t replace the directory /css.

My login screen and rss feed are also missing the styles.

I had a similar problem before, and turns out my site was injected with malicious code. I looked at the tops of several php files, and didn’t see anything out of place.

Someone please help.

@ebheadservice: Don’t highjack another poster’s thread. Please post a new topic.

Try re-uploading the wp-admin and wp-includes folders from a fresh download of WordPress 2.8.5. I’d also strongly recommend that you upgrade WordPress asap. By staying a few version behind, you are currently running a real risk of being hacked.

I’m a little worried upgrading is not so simple as uploading my theme directory into a new version, if the new version doesn’t accommodate it, I’m _____ed. How would YOU upgrade? With the upgrade link in the admin section?
JSC

I have

re-uploading the wp-admin and wp-includes folders from a fresh download of WordPress 2.8.5.

the admin looks fine again. Sooooo . must be code injection. I had another installation of 3.0 which got completely hacked. I’d really like to find out where the injection comes from.
thanks for the suggestion.
JSC

1. Backup your database.

2. Deactivate all plugins

3. Switch to the default theme

4. Carry out a manual upgrade to 2.9

5. Backup the database again.

6. Use the Auto-upgrade option to upgrade to 3.0.1

7. Re-activate the old theme.

8. Re-activate the plugins one-by-one.

https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Thanks for the detailed instructs. I will follow them. I think I will scrape the domain (erase everything) before installing the new version, including erase my theme file, and upload it again from my computer.
JSC

@ebheadservice: Don’t highjack another poster’s thread. Please post a new topic.

I didn’t mean to hijack the thread. It just seemed like we may be having the same issue, so any answers to one of us could be helpful to the other. If it were a completely different topic, I would have started a new thread.

Anyway, my problem magically went away on it’s own today. I have no idea why or what it was since I didn’t change anything. I also don’t believe it was my hosting account, because I have several other sites on the same server which were still working. Not sure what to make of it. Just glad it’s over.

I’m changing this to resolved, but it’s not really. I have a working site now again, but my work around for the security issue was simply to disallow all comments, since that seems to be the main security hole. I have several sites where I’d love to get comments going, but don’t dare because of the security risk. But, for now it’s ok.

Above post not really clear. The version showing for this problem is 2.8.5, but I am referring to sites which are much later, like 3.0 which were compromised, and the only way poss. was thru comments. I also would love to passwrd protect my admin folder, but this makes the media uploader impossible to work with. (see thread) It’s still a fab. wonderful script, and security is not what it could be…