Everything is broken!

Wow. They’ve posted a lot of comments with a mega-zillion links and CSS saying display:none (which means it’s on the page but hidden … because it won’t display). So I’m not sure that they’ve “broken into” your site … are you sure they did?

You can probably go through your comments and delete the junk. Then set your settings so that you moderate your comments, at least the first one for each commenter.

If you’d already done that and the comments appeared anyway, then it’s possible that they broke in, or got in somehow.

Thanks for looking! If I go into my comments I can’t see them…am I missing something?

Hm. Looks like I spoke too soon; the spammer links are not in comments, but in your posts.

On your Green Beans are your Friend post, view the page source and you’ll see a zillion links right after the last sentence of your post, tucked into a div with this styling (so it doesn’t display in the browser):

<div style="display: none">

Then, no links on “No wait, come back!” but there are links at the bottom of your “Stuff yer onions here!” post.

The fact that they’re not on all posts leads me to think that this isn’t a matter of someone adding them to your theme (but I’d check anyway).

I would definitely back up the database, and then take a look at methods someone may have used to log into your admin panel. I’d also check the theme (single.php) — the one on your server.

-can see spam when viewing page source but have no idea how to access posts in CSS to erase spam links

Not sure what you mean here. CSS is just coding that makes stuff look the way it does (to make a too simple explanation). You’ll need to edit your posts in the admin panel to remove their coding.

That said, and to state the obvious, you need to secure your blog so that this doesn’t keep happening. I’d also remove this:

<meta name="generator" content="WordPress 2.5.1" /> <!-- leave this for stats -->

from the header, as it’s nobody’s business.

…offered to pay someone to do it for me via Twitter, other people scared as well and I got no offers

if youre at your wits end, I do that sort of stuff, for a reasonable amount. I can clean out the exploits and upgrade the install to 2.6.1 for you all in one sitting. Now is the time too since I have the next cpl days off from work.

If you’re interested, drop me an e-mail @ (village-idiot.org @ whoo)

Just switch those around ??

Good luck, either way!

Well not quite the same but the thread title seems appropriate
I changed the blog and wordpress location now everything in Settings > General and now everything is borked (instead of ‘broken’)
Site
How do I fix this when I can’t get back into the admin settings as a result of this?

Thanks

I changed the blog and wordpress location now everything in Settings > General

Did you change the blog url and home settings in General/Settings? If so, see if the video here helps you fix the problem.

https://educhalk.org/blog/?p=21