Hacked – db
-
A couple of my wordpress sites got hacked. I’ve manually updated to 3.5.1, and I’ve manually updated all plugin files as well. I changed my admin name AND password, as well as change the db password in cpanel. I’ve also diligently checked through the entire wordpress core, themes folder, and uploads folder and found nothing. I’ve also tried disabling my child theme and all plugins. The malicious code, I believe therefore, is in my database, possibly in the wp_posts table. And that’s about where my knowledge on how to find and correct the problem ends, as I’m not an experienced SQLer. I know that whatever it is keeps modifying files in the wp-includes folder, adding an iframe at the top of certain js files. But when I try to search through my db for references to iframes, I find nothing. I keep installing a clean WP build, the site stays up for a little while, and then it throws me a fatal error after a while.
Anyone know how I can root out the problem in the db?
- The topic ‘Hacked – db’ is closed to new replies.