Jeroenla

dafuq…now the site is gone again…
I get the setup page!

Also: how do I block countries entirely?

ok… I am really confused.
I had to restore the files to the state they were in before I changed the prefix to my tables. My host helpdesk tells me the prefix is in the wp-config, but there it still lists the old prefix…

how can this be? Shouldn’t this cause a conflict? I mean, the file tells to look to table prefix A, but this doesn’t exist anymore.

I’ve changed it into the prefix which it should have, and the site seems to work (also after purging the cloudflare cache).

So…. what else did I do?

Well, i did change the .htaccess yesterday, putting this in (source):

WP-Content/Uploads

The uploads directory is the one directory that will almost need to be writable by the web server. It’s where all files are uploaded remotely. You want to prevent PHP execution in this directory, you can do this by placing an .htaccess at the root of /UPLOADS using:

# Kill PHP Execution
<Files *.php>
deny from all
</Files>

Note: This can break your theme if it requires PHP execution in UPLOADS. If you apply it and the site breaks, remove it and the site will reappear.
WP-Config.php

If you use a server with .htaccess, you can put this in that file (at the very top) to deny access to anyone surfing for it:

<files wp-config.php>
order allow,deny
deny from all
</files>

Disable File Editing

It is recommended to disable file editing within the WordPress dashboard. WordPress has a constant that disabled this editing via the wp-config.php file. Append the following two lines to the end of your wp-config file:

## Disable Editing in Dashboard
define(‘DISALLOW_FILE_EDIT’, true);

I copy pasted both into my htaccess, directly following the standard bits. Can this be cause for problems?

• This reply was modified 8 years, 1 month ago by Jeroenla. Reason: extra info

Sadly, I cannot afford those companies. It’s a hobby thing. But one which I’ve spent blood sweat and tears on for the last 15 years…

This morning, something new. A 403…

I don’t usually have legit visitors from those countries. Good idea to block them entirely…

Well… I think I did all the things in that guide. Only the htaccess things seem new to my untrained eye…

And god, please stop telling me to remain calm. After a week of constant artillery fire, that’s not quite having the effect you’re hoping for ??

I can actually still get into the back-end…

edit: no, I cannot…it was cached.

• This reply was modified 8 years, 1 month ago by Jeroenla.

Well, things get worse. Site has been taken down, so I cannot even access anything… wtf am I supposed to do now? I can’t afford those sucuri guys, I mean, this is just a hobby. But one I really don’t want to lose…

Additional info: I’ve also ran all possible scans on my computer, all came up “clean”.

Edit:
https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html#url=https://www.backpackeninaustralie.nl

The links mentioned here are the exact links I’ve removed….

Addition: it seems also default themes such as twenty thirteen and twenty seventeen are popping up with URL’s which are on the google blacklist…

post to subscribe

@jeremy:
I had a dev look at it. Don’t ask me what he did, but he did get things working again. Quite a relieve.

I have been using JetPack for a couple of months, and have been quite happy with it.

Until today.

We moved the site to another server/host. And upon the renewed activation, loadtime went from 310 ms to 31 seconds. Yes… HALVE A MINUTE.

Furthermore, template does not load, nor do widgets.

Something seems to be seriously wrong with the latest version…

Note that NO ADDITIONAL plugins were installed, so it cannot be some incompatibility issue.

• This reply was modified 8 years, 2 months ago by Jeroenla.

Thanks, that seems to be quite helpful. Especially the plugin, as it simplifies things quite a bit for a nublet like me.

Similar problem here. I am unable to use MailChimp RSS import, as the feed does not validate.
I’ve already deactivated all plugins. No result.

thanks