gandalf458

The latest is that the administrator changed the cPanel password, but I couldn’t log in; then he found he couldn’t log in. Now, the host can’t even change the cPanel password, so they have escalated the issue! ??

Hosting is Vidahost in the UK. My usual host uses mod security which stops a lot of hacks. Whether it would have stopped this one I don’t know but I suspect it would.

I have also been unable to get in to cPanel but unfortunately it is not my account so I have to ask someone else to change the password when needed.

Hi there CB. I will post if I find anything more. I hope you will do likewise. I notice that Googling suliman the hacker comes up with dozens of sites that have been hacked. I’m sure someone has an answer somewhere…

The website was apparently successfully restored from backups. I have since installed All-in-One WP Security and Wordfence.

Since then, so far 3 times I have been unable to login, but have been able to change my password each time. What I have then found is that the admin username has been changed. I’m rather confused!

Many thanks Jan

I have apparently resolved the issue and will work through the recommended security measures.

G

Okay, well I found that 766 stopped my website pages from displaying. I found that changing the permissions for the uploads directory to 777 allowed it to create the required subdirectories and upload the photo. I hope that when I change it back to 755 it will still work…

Well, having created a proper derivative template rather than the child template I apparently had I now have widgets!

Ah, well it looks like I was misinformed. Thanks.

I understood that I could create a derivative theme with just a style.css and create other files as needed. Have I misunderstood the basics? If I copy all the files presumably it’s not a derivative theme is it?

Esmi, thanks for your patience. I’m probably being daft. I have deleted everything in my theme folder and reverted to twentyten. Then I copied the twentyten index.php file and my CSS file – I can’t imagine the CSS is going to stop the widgets working – into my theme directory. In the Manage Themes section of my admin area I have activated my derivative theme and there is Options: widgets. But if I select widgets I still get No Sidebars Defined.

Well, I have replaced the sidebar.php with the unmodified version and removed loop.php, loop-attachment.php, loop-page.php and loop-single.php but I still get the message in my admin area ‘No Sidebars Defined’. There doesn’t seem much else to replace. My index.php is unchanged from the original.

I only have primary-widget-area and secondary-widget-area. Mostly I have removed things as the theme is for a non-blog website. And, on looking at sidebar.php again I have what appears to be a widget search form. Puzzling.

As I understand it it’s a derivative theme. I have my own footer, header, index, loop-attachment, loop-page, loop-single, loop and sidebar php files which I created by modifying the originals.

No, I haven’t touched functions.php (thankfully).

Thanks.