• Hi Guys

    Spent the last few days trying to get my website back up and running, i’ve no idea what happened but when i tried to log into my admin page a couple of days ago my password wouldn’t work. I ended up getting a full backup of my database and wordpress installation and downloaded it to my computer. Good job i did as i didn’t know a whole lot of what i was doing and deleted this from my server.

    It was getting it back onto the server from my computer that was causing me all the issues, anyway to get to the point, when i couldn’t login to my admin, i checked my website online and i noticed the URLs looked different.,

    EG: https://darbleyfish.com/blog/#.VhGS8flVikp

    The following (#.VhGS8flVikp) never appeared in them before, this is a recent development and it has me worried.

    I just now got my site back up and running (my old admin password works again??) and the same issue is in the urls.

    I’ve deleted all the subscribers (258) from my site in a panic as i have no idea if it’s truly hacked or if one of those users have somehow meddled with my admin profile.

    My site is running bulletproofsecurity plugin and i have everything turned on,
    i would love an explanation from anyone that can help.

    Regards & Thanks in advance

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator James Huff

    (@macmanx)

    That’s typically added by SEO or caching plugins, not a hack, just a feature that can be switched on or off.

    Are you running Yoast SEO, WP Super Cache, or any other SEO or caching plugin?

    If not, and just to be safe, remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    Thread Starter darbleyfish

    (@darbleyfish)

    Thanks James

    I’m running Squirrely Seo, but i have that running on my site for ages, those extra bits in the URL have only just started showing up.. I’m reading through the guide you linked and for sure, i will implement any of the security measures that are not currently set up..

    you mentioned that it can be turned off, how would i do that? i just don’t like them appearing as part of my url, they look well out of place, that’s what lead me to think i was hacked or compromised from the beginning.

    thanks for your help ??

    Moderator James Huff

    (@macmanx)

    You’d have to check with the documentation or support for that plugin to be sure, I’ve never used it.

    An easy way to rule it out as the problem first though would be to just deactivate it and see if the links still have the random bits appended.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘is my site hacked?’ is closed to new replies.