[Plugin: Add Link to Facebook] links are hijacked to softwarepromo.ru

Could you please send me the debug information as described in the last question of the FAQ, so I can see what you and ‘deenorris’ might have in common?

The question remains how this could happen.

Try to set the permission of .htaccess to 644 or maybe better 604: source.

@deenorris: could you send me your debug info too, please?

You need to modify the .HTACCESS in the PUBLIC_HTML folder to removed the hack.

First you need to change the permissions because the hack sets it 444.

Once you have edited the .HTACCESS file, you should harden it by setting it back to 444.

This is a hack using wordpress itself to modify the .HTACCESS file.

Good Luck

Which hosting provider are you both using?
I am curious if it happen to be the same one.

Never even got as far as debug. Once I figured out the .HTACCESS trick, I removed the offending IF BLOCK and it was fine.

It was odd that every time I tried to access ADD LINK from the dashboard, it make a call to the .RU address and I got the crappy imitation. Once I removed the .HTACCESS hack, it stopped.

Again, I am not accusing, but clearly something is going on.

When I spoke to my hosting company, HOSTMONSTER, they said they are seeing a lot of this hack in the past week or so from WP users.

How do I change permissions? Sorry, tech savy but a technical newbie.

I’m with 1&1 btw.

Using FTP or using the dashboard of your hosting provider.

Found the permissions in filezilla.

Please don’t forget to send me the debug information. Maybe I can find what you have in common, except for Add Link to Facebook (without saying that Add Link to Facebook couldn’t be the cause, but I have no idea how). From the FAQ:

S02 How can I send the debug information?
Go to the plugin page (via the Tools menu) and click on the link Debug information in the Resources panel. Optionally fill in your name and describe the problem as accurate as possible and press the Send button.

I keep trying to edit and save the new .htaccess but it says “critical file transfer error” any ideas?

Hardening WordPress

you have to change the permissions to allow Owner Read/Write first

The hack sets the file to read only

M66B The wordpress administration panel plugin page? Can’t seem to find it.

See question U22 of the FAQ for hints to find the settings.
Did you enable the option ‘Share with all users on this site‘ ?