Can’t save, edit or publish

Maybe my post won’t help, but…

Same issue. Never modified theme or any file since 2 years.
Just to specify that I have another hosting provider.

I follow the advices on https://www.getrichslowly.org/blog/2008/06/08/patching-the-wordpress-anyresultsnet-hack/
I inspected all the files and database tables/rows as specified, and the only things I found are:
– in wp_users table: nameless user created at 00:00:00 on 0000-00-00. Name: Google. I’ve deleted it.
– in wp_usermeta table: corresponding userid had the rows:
wp_capabilities a:1:{s:13:”administrator”;b:1;}
wp_user_level 10
first_name …
I’ve deleted it as well

Then I replace the index.php file (https://seotoos.com/) by my back-up one.

But I still have the same issue (ie Can’t save, edit or publish)

FYI, I’ve make a search for any file modified around in May 2009, and except the index.php, nothing has been modified
So, it means that the problem is in my database…

I found the exact same entries in the wp_users and wp_usermeta tables. Apart from deleting these entries, any idea what other tables to fix/repair?

This is getting serious, folks.

Bleary-eyed from lack of sleep about this problem, I stumbled downstairs for my coffee and checked my email as I did so. A certain “Kathy Bates” berated me for my blog being all screwed up. You have to understand, my blog is fairly obscure, since I am still a fairly obscure YA writer, still pre-famous and pre-rich (as I keep telling my daughter, who wonders when I’ll be on TV and buy her the iPhone she wants). I emailed her back
saying I was working to resolve the problem and begged for her understanding.

This morning, issue still unresolved, I get a phone call. Kathy Bates on the line. She said that if I didn’t get my blog up and running to standard, she would make a special trip to Bali (this is where I live, in Paradise, but we still have our fleas and bugs here).

Look. I started blogging to make friends and fans. Not to attract psychos because my frickin’ blog is having some problems.

I and my family are moving to an undisclosed location until this is resolved.

I just discovered the same problem yesterday, have WordPress hosted by Yahoo small business (who I’ve also emailed), I can’t even change my password or profile!!

Hello, WordPress people? Even if you would be kind enough to tell us that you don’t know what’s going on, that would be helpful…

To be fair to WordPress, if this is an upgrade issue (as the parallel thread on the same topic suggests), then it’s Yahoo Web Hosting that’s at fault in my case. They claim to have an “automatic upgrade” option, yet the “blog manager” section of the site states:

Blog type: WordPress
Version: 2.0.2

When the current version is 2.7.1.

WordPress is FREE software. When you make a request for help here, no-one is being paid to help, or to answer you. Any help you do get here will come from another WordPress user, not anyone from automattic.com or wordpress.com – although the former do offer paid support.

My hosting has restored a backup from one day before the “attack” and now it works fine… but i’m afraid…

Thanks for the clarification, and apologies to all the volunteers at WordPress.

To those of you are still struggling, you have to also look for any of these pesky “fake” jpeg and png files that are scattered about. Delete them or change their names (if you’re afraid you might change one you really need…and you can then rename it back…)

I also altered my personal login info, so that it would be rewritten.

I was changing and chasing down a lot of files, so you’ll almost have to go through things folder by folder. Oh, and as I mentioned above, check your Uploads folder (or the only you use for that purpose, if you renamed it) for anything that looks suspicious.

If you use the information at the “getrichslowly” blog (posted above a couple of times) you’ll have a start on this. I does demand using phpMyAdmin to access and alter your database. If you don’t know what you’re doing in there, you may want to find a person who does….

Good luck.

Pilt

I can unlock my doors and return to disclosed locations.

My hosting people graciously solved this problem for me.

It was in the wp-plugins. Don’t know which one since I backed up and deleted all the plugin folders all from the server, but the blog works fine now. I think it was one of the antispam plugins. Today I backfill the wp-plugins and try them out one by one.

I, too, discovered 5/22 that I could not update my blog. My host is BlueHost, and I also had the “seotoos.com” hack. Turns out that 3 files were hacked on May 18, 2009 @ 4:24PM. My index.php (like everyone else’s); then in the plugins folder, both akismet and hello (the “hello dolly” WordPress plugin) both had versions with a “.new” extension. I replaced the index.php with a copy I had from 6/21/2008 on my computer and deleted the akismet.new and hello.new from the plugins folder (in the wp-content folder).

For now, my blog *appears* to be operating OK (until the next hack). In the meantime, I’m going to go back in and change my passwords…

Ahhh… same problem for me. A blog user of mine reported on May 20th that they were being prompted to register so that they could comment. I knew we’d not chanegd it (only two people have admin capabilities on my blog) so I was a little suspicious.

I come to post a quick update this afternoon and I cant post/edit sucessfully – did a google and landed here

I’m on a very old (2.0.1) version of wordpress and have never updated because… well… never really had to. This is the first time I’ve ever suffered any problems or lost any functionality.

So, i’ll replace the old index php and anything else that has been modified and manually clean the entries form the database.. my question then is… would the latest version (2.7?) have been immune to this inject/attack?

Hello:

I have the same syntoms of all of you.

I did post on May 18th early in the morning, but I can see that there were changes in my files made the same day late in the afternoon ( my index.php have the “soetoos” stuff).

My webhosting is yahoo, I contected them, they told me that they do not support wordpress and that I must contact direct to wordpress. So, I come here and read all this information.

I contact yahoo back and told them about the hacker files, Now they are trying to fix the problem, I hope they find a solution.

Thank you for all the post, very useful

Blessings

test

Ive read this topic multiple times and just am not sure what to do. I do have the “seetos” code in my index.php so i must have been attacked by the same hackers as the rest of you. But the only problem i have is that i cannot edit blog posts or pages.

Honestly, I have never done anything with my “database” and the only things I do with my site are add blog posts and information through pages. I access my FTP server through FireFTP (firefox).

Luckily I am personal friends with the person who does my webhosting. Would you suggest I ask him to do a “backup restore” since I have not changed any themes, plugins or anything pretty much since i set up the site a few years ago? Will that affect any .jpg files that were uploaded to my FTP server a few days ago? Please excuse my ignorance as i have never done anything with the database, i only add/delete files on my FTP server.

It is extremely frustrating not being able to edit any posts or pages so any help you can offer is greatly appreciated. I also found this post, which is recent – https://forums.digitalpoint.com/showthread.php?t=1337791 this person said his post table was crashing. how could i investigate that?

thank you!!