• Resolved PrinceColin

    (@princecolin)


    Hi guys,

    I hope everything is good.

    I have a golf blog and it recently got hacked. I downloaded WordFence, activated the firewall and did a couple of scans, cleaned up what needed to be cleaned, then scanned again and everything was great, and the site was working again.

    However, I once again received a hacked page when going to the site (in this case, a warning page from Windows pops up). Once again, I scanned, found out that there were some new issues, cleaned those up, and now the site is working beautifully again.

    How can I prevent my site from getting hacked again using WordFence? Is there something in the settings that I should try and look into?

    Thank you very much for your help guys, and I kindly look forward to your response.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • You will need to identify the security issue that is allowing malware attack servers to install their files on your website. This will heavily depend on your own code skills.

    If you are able to, then start going through all of your plugins and search online to see if anyone has reported them as being insecure. Do the same with themes.

    That is a good start.

    Else there are a number of premium services that WordPress mods recommend, I even think Wordfence themselves offer one, that can do a manual sweep of your website to identify security weakness. I have never used any, so am not recommending, just mentioning they are available.

    @princecolin,

    You could start with the Wordfence site cleaning guide; there are also a few interesting articles in their Learning Center about WordPress security.

    Now keep in mind that the hack could be happening at server level —another site hosted on the same server as yours could be infected— in case of insufficient accounts isolation; there seem to be quite a few sites on the same server as yours (you can check here)

    Thread Starter PrinceColin

    (@princecolin)

    Hey guys, I greatly appreciate your responses. Just did a WordFence scan and cleaned things up again. So far, so good. Hoping it stays this way.

    I did another WordFence scan and everything seems to be cleaned up. Just to give some more information, I do have another website under the same HostGator account, so both sites are on the same server.

    The golf site is my main site, but there is another site dedicated to video games. It was the gaming site that was originally affected, but then it carried over to the golf site I believe, which is my main site.

    Again though, after performing a WordFence scan, and deleting and repairing some of the things that it said to look into, it seems like the site is running smooth again.

    I’m not holding my breath though. Just keeping my fingers crossed. I did look over the guide yndmgo and it is what I followed. Hopefully, things will work again.

    Thanks again guys, I really appreciate it. I’ll be sure to hop right back on this thread if the hacking persists.

    Hi princecolin!
    Glad to hear things sound ok for you now. I’d just like to add a few things

    If the infection keeps coming back, you may need to hire an expert to help you find the point of entry. Even wiping a site clean and starting from scratch does not always help because you may be installing vulnerable themes or plugins on the site.

    When you have several sites in a hosting account the infection can spread between them. It may be advisable to separate the sites in to two hosting accounts.

    Resolving this thread for now. Best of luck!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hacking Issue on my Blog’ is closed to new replies.