• Hi,
    I have a serious problem: my site seems to be infected with some spammer bug that is creating random posts, with current or older dates.
    Also creates new spam categories.
    To do this it seems to be using one different WP user each day, and it appears to be doing it directly into the database, because some of the users involved have no permission to publish posts.
    Does anybody have any idea how to find the infected file php, or code, or entry table? And how to fix it?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hello laslo,

    While I haven’t had this happen to me personally, Have you tried changing your phpMyAdmin login and credentials? You will also need to change it in your folders wp-config.php file to match the new credentials.

    Most importantly I would follow the WordPress Codex for how to remove any hacks or viruses. This should be followed regardless of whether or not the above works as that will remove any leftover files the hacker or spammer may have added.

    Hope these help,
    Kevin

    Thread Starter laslo

    (@laslo)

    Hello Kpudlo,
    Thank you for the advise.
    I just changed the password for the database user.
    We’ll see if that blocks the spamming. (Weird enough, I’ve been seeing those spam posts this week, each day around the same hour).

    I will check that codex too!

    Will let you know how this goes.

    Check the bottom of your theme’s functions.php file for an injected add_action script. Pretty common to see those with these spammy post infections.

    Check for any bogus wp-admin administrator users as well and remove them if you find any.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Spam posts and categories created’ is closed to new replies.