Website theme stolen
-
Hi there.
Quite a weird situation on my hands. I run a business and someone copied my website theme to a new domain. They are planning to change some things around and launch the business/website as their own. I am trying to figure out how they did it.
I found out when I got an email from WordPress about “my site”, when in fact it was a new domain that my theme had been copied to.
I changed the password and logged in. It turns out that they copied everything, including my email as the Admin on the account. Everything was the same, my profile, users, pages, posts etc. I cannot find any information about the domain from Whois.
1. Did they have access to my WordPress admin panel, or my hosting and/or database?
2. If not, how did they do it? Is it possible to copy everything without admin access?
3. What should I do? If they had access to my wordpress or backend I should stop working with and delete all users like my developer and content contributors?
-
If new site domain is completely identical, then I’d say they have your code. It doesn’t necessarily mean they have access to your admin panel, there are other ways to get full theme’s code, as an example, you could have misconfigured apache (or any other web delivery platform you’re using) which would give acccess to your theme files. And that’s just one of the possibilities.
To answer your 2nd question, if everything’s secured and well structured, there’s no way to copy everything without sever access.
And lastly, you most likely don’t have to delete any of the users, but I’d advise changing all passwords.
The most common way wordpress sites get hacked is because of the weak password.
If you’re username was admin and your password was something like admin12345, then yeah, you could have been easily hacked.
- The topic ‘Website theme stolen’ is closed to new replies.