Hacked? Not sure

  • Hi folks, I had a post pulled from trouble shooting. Are you not supposed to mention Hosts that have hacked servers? I reported yesterday a probable hack on a shared server at ***** hosting that was making our index page invisible and giving a virus warning. The company reportedly fixed this problem and reset all our passwords. SInce that time the front page is now fixed, however, WordPress is behaving erratically… When I press on Insert Image into a post or page, instead of creating a popup window and allowing a gallery insert, it is creating a new page and the insert into post does not work. This problem may be related to using the permalinks setting, but I cannot see any rewrites in the htaccess file that would be causing it, unless it is in a root folder I cannot access.

    Also, all our edit buttons have disappeared on the visual and html edit pages/post pages. All that is visible is the insert media line. No text is visible in the edit blocks although the pages have text on them. Is this a corrupt WP install now, or has the company done something it should not have.

Viewing 9 replies - 1 through 9 (of 9 total)

  • can’t find your other post anywhere
    feel free to mention the host that was hacked – this can possibly help someone in the future with same host

    it does sound as if you now have a corrupt install
    I would upload the /wp-admin and wp-includes folders and the root core files again
    do not touch wp-config.php (examine it for anything out of ordinary) and don’t mess with wp-content folder (though if you still have problems, you may want to consider deleting all plugins and themes and re-installing)

    Thread Starter jefferisp7

    (@jefferisp7)

    Yeah, it was odd. I tried to add an update to my post and it immediately said< this thread is closed.
    The host was iPage and it was a brand new install, so I believe the hack was on a shared server. I suppose that buying dedicated IP address won’t prevent a global hack on a shared WP server will it? Since the problem is in the server and not with the directory or the IP address…
    Jeff

    Moderator James Huff

    (@macmanx)

    No, getting a dedicated IP address won’t help. Once one account on the server is compromised, all are at risk.

    Were you able to resolve your problem?

    Thread Starter jefferisp7

    (@jefferisp7)

    Whew… well yes and no. This is the worst experience I’ve had with a server host in many years, perhaps forever. For some reason ipage installed 2 versions of WP , one nested inside the other (wp-admin ? inside a wp-admin folder) . It said it uninstalled both installs, but all the files were still left in the root folder. It shows 2, now 3 installs, although I manually deleted the first 2, and did a fresh install.

    The server, including ipage.com, has been going down all day , with internal server errors, failure to connect to database errors, and a host of other problems. This was the first time using ipage and I chose it for this client because it was recommended well on 10-cheapwebhosting.com, which formerly had recommended bluehost, which I’ve used but noticed that the throttling issue was starting to cause some problems and they haven’t been honest with the “unlimited” files and file use as they have claimed. ( For years I’ve used pair.com as my main hosting company, but it sucks when using WordPress for auto install plugins. So much security I gather that half the installs fail from the WP interface. )
    Anyway, the client is getting upset about all the times he is shut out of his site and fears losing all his work again. So, right now, I could not recommend ipage.com to anyone.
    Maybe they were really hosed by a big hack attack… but they at least ought to let everyone know what is going on.

    Thread Starter jefferisp7

    (@jefferisp7)

    BTW, 10-cheap changed their recommendation to not recommended on bluehost for the above stated reasons. So I was following their advice to switch for new clients.

    Moderator James Huff

    (@macmanx)

    Sounds like it’s time for a new hosting provider. Normally we don’t solicit hosting providers around here, but since you’ve been through two so far, I highly recommend A Small Orange. I moved to them five years ago and never looked back. Best service I’ve ever had.

    Thread Starter jefferisp7

    (@jefferisp7)

    Definitely seeing slow page loading on iPage as well when it is up and working..

    What about ixwebhosting.com ?
    I’ve been reading about them lately as decent…

    I’ve heard good things about a small orange as well. They have an easy install for WP?
    Jeff

    Moderator James Huff

    (@macmanx)

    I haven’t heard about ixwebhosting before, but then again I haven’t been looking for hosting providers lately.

    ASO offers one-click WP installions via Fantastico.

    James, thank you for information about ASO, I just registered and want to try them.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Hacked? Not sure’ is closed to new replies.