gonzosgirrl

I definitely took their ‘advice’ with a large pinch of salt (and obviously, I created the site with WP anyway – and I’m very happy with the result). I do have the latest WP update installed, and only have 5 plugins, which are also up to date. I’m diligent about that.

I am not terribly savvy when it comes to things like access logs, etc., so I will ask the questions using your phrasing above. Thanks for the input! I will leave this open if that’s okay and update if/when I get an answer.

For just this reason – they said it was difficult to secure/prone to things like this. Of course were also the designers of our old site and wanted the job of redesigning the new one, so there is a bit of conflict of interest there. ??

Unfortunately, my hosting company will be more likely to say ‘I told you so’, as they really tried to discourage me using WP for my site in the first place. :/

I am going to go through the process suggested by that ottopress link above, and fortunately, I do have a full back up of the site from just a few days ago, so I can restore it (according to that post, the only way to guarantee that whatever code may have been added is gone) and then hopefully find the back door and lock it up!

Thanks for the response, even though it’s not what I was hoping to hear. ??

I read some of those posts before starting my own, but I will go through them more carefully now. I am the only user and I am 100% certain my password wasn’t hacked, so I’m really not sure how this can happen. Does this mean that the ‘Anyone can register’ feature (unchecked) is ineffective?

Do you think it would be better to check it and choose the ‘Subscriber’ option and then restrict posting?

That did the trick. Thank you!

I added the extra field using the eShop Extras plugin here https://quirm.net/wiki/eshop/additional-plugins-and-code-snippets/add-a-field-to-the-checkout/

and I made it a telephone number. I didn’t change anything else from the sample but if I try to submit my form with that field blank it tells me it is a required field.

There were some errors in the details you entered…

    Phone Number - missing.

(It also has the red asterisk beside the field name which indicated ‘required’.)`

Thank you! I don’t know why I didn’t look there – too obvious I guess. Doh!!