Helen

Ok well don’t shoot the messenger; Just passing on what they said as you asked me to ,I’ve spent a lot of time sorting it out so I will leave it to them to investigate. Whether the theme has an inbuilt hack or whether it is simply vulnerable the unfortunate result was the same. The creator under his other name has still not answered my concerns so they clearly aren’t so keen to rectify the issue. I will just be sticking to wp’s own or paid for themes in future. Btw it is only on wp sites they are seeing so many hacks so I doubt it’s a server issue but you’re the experts ??

Hi Jan I asked them about the file but they said they didn’t haave a record and as I had uninstalled it they can’t check again. Don’t want to put myself open to it again by reinstalling. What they did say is that they are very suspicius of this as it has been happening to a lot of wp sites lately through themes and they are undertaking an ongoing investigation to ascertain if this is a ploy being used by hackers generally. Creating a theme with a back door to hack later. Sorry I can’t be more specific.

I don’t know I can only tell you what they told me. I can ask if they can give me that. I will do so tomrrow as I have had to spend all day rebuilding the site. I did email the theme creator asking of they were aware of it but as yet have had no reply. It just strikes me as a tad coincidental that his page bears an eagle logo very similar to the one on the hackers page..Do creators normally use false names on here ?

Also the author is one Ali Han based in either Pakistan or istanbul depending where you look, not John Brown unless of course they have ripped off his theme..the hackers are pak cyber eagles based also in Pakistan

Ok
Sorry i was livid. My site was hacked today and when the tech guys from my hosting company looked into it they said that the rainbow theme had a backdoor built into it that allowed hackers to gain access. I tracked back to the theme author and curiously their logo was almost identical to that of the hackers page put up when they took down my site……The hosting company advised it should not be used under any circumstances so I think I’m pretty much on the right track!