erikacon

The database contains posts and pictures and everything, right?

I had to import my old database, didn’t I? Had I created a brand new one, there’d be nothing in it.

First of all, I just reinstalled wordpress. Same problem.

I don’t understand. If I don’t import my old database, all my posts and everything will be gone. Won’t it? I mean

I don’t mind reinstalling WordPress but I’m not deleting the database. that would put me back a week again.

I don’t know if you remember me from the other forum but I’m the one whose website was hacked. Endless problems getting it back again. My ISP wiped my site and gave me a clean site but changed all the credentials. Of course, when I imported my database from the backup, the credentials were different. I made the adjustements in config.php and got my page up again. I’m having other issues as well but want to deal with one issue at a time.

yes

Well, this is inside wordpress. you know how have the various settings on the left of the page https://www.ceconn.com/wp-admin/options-general.php. General is the only one that shows up – not Comments, or reading or writing. None of those.

Should I install wordpress again?

They were all in the main folder – not upload or anything else.

I did see this file: oldserver.php. I deleted it. I also deleted wysiwyg. Looking at the file, there were a lot of letters and such that looked suspicious so I deleted the files. BTW, there were two like that. Thanks for your help.

Now, to get back to my situation, what confused me was that the original database had db name, username, password. That site was deleted by my ISP and they reinstalled a new site with new dbname, username and password. So, when I uploaded my backedup database, I ended up with a strange looking appended db name. That had me all confused but after changing the config.php file to the appended names, it worked.

I thought I’d share that with you.

Well, this particular site has few images. I’ve run the virus app and it appears to be clean. I’d always run it daily, for all the good that did me.

So, to get back to my problem, if the credentials don’t match from the new site and the backup, what can I do? For that matter, what good is the backup if I can’t use it?

I see what you mean. The security did find an infection in the theme I’d been using. It was cleaned and then I emptied the virus vault. The ISP changed all my usernames and passwords so that brought me to the question as to how do I upload the backup database when the credentials don’t match?

How do you do that?

I did. I left twenty ten alone. I have several themes in that folder and renamed them all except 2010.

I had done that before and then changed them back because it didn’t seem to make a difference.

Now, I’ve renamed all of them except twenty ten – again. However, nothing shows up in the themes directory. They seem to be there but all of them have an x where a screenshot should be. The twenty ten included. Furthermore, in the Dashboard I get a message ERROR: The themes directory is either empty or doesn’t exist. Please check your installation.

BTW, the style.css file is there.

Well, yesterday I thought I’d try a restore to another date. Then when I tried to get back to you, I got a “missing file error – unable to find locale data files. please install”
I was so rattled, I phoned Toshiba and spent around an hour with them. they had me sign in under another user. that was OK. Meanwhile my ISP sent me their login credentials so I could get into the wp-admin. Finally, I did. I don’t know if that’s any help because I don’t seem to be able to upload additional themes. Everything has an x instead of a screenshot.

I’m at the end of my rope. Any suggestions? The posts all appear to be there. I guess that’s good. Should I upload a fresh version of wP 3.3.2?

Then it was pure coincidence that it happened after upgrading. I guess it could happen.

I just finished scanning again with a new product. My laptop is clean.
I went to cpanel to .htaccess and found this at the bottom of the file:

<Files 403.shtml>

order allow,deny

allow from all

</Files>

Another question re hacker. Would a hacker leave his name and email address like this one did? Seems weird.

Is that anything? The permission was 644

the hacker even left his calling card in the footer.php. In part, here it is.
<?php/* * TeaM HacKer EgypT – a simple Web-based file manager * Copyright (C) 2004 TeaM HacKer EgypT <[email protected]>

Can you believe it? I thought 3.3.2 was for extra security. Instead I get hacked.