lfreberg

Thank you! Compared to the problems I’m having with the blog, I think I’d prefer to deal with plugin problems right now ??

Updating WordPress for the three blogs I maintain is a huge investment in time, and then we get hacked anyway. I’ll do it, if it solves this hack, but otherwise it’s actually faster to use Rex Swain and upload a fresh footer whenever we’re hacked. It sure would be nice if WP could make the upgrade bit easier…hint hint hint ??

Is your blog embedded in a larger website? You must provide very specific directions to the config.php. In other words, we have several domains within the same site, and you can’t just put in https://www.yoursite.com/config.php. You have to say https://www.biggersite.com/yoursite/blogs/yourblog/config.php or whatever the exact pathway is. That worked for us after I tried all the cookie deletion stuff.

We are using a 2.6 version of WordPress…updated last summer just to avoid this very same problem, and now the hackers have found a way to get to the footer in these newer versions as well. The blog that was hacked doesn’t even allow people to register to comment ?? It’s an arms race, folks….we use rex swain’s http viewer daily to check for these. I recommend you do the same.

Hopefully, enough people will post on this issue that we’ll get the attention of the WP gurus, who probably know where we can look to get rid of the redirect. I can post on my blog, but nobody can login to post comments. That is an inconvenience to me, but probably disastrous for bigger blogs.

I do allow people to register themselves on my site, and I noticed a flurry of new signups from obvious spammers last weekend. I’d hate to think I’d have to close down registrations, but I just don’t have time to deal with these issues.

This happened to me too, and it’s a hack. You can access your dashboard by deleting the redirect info in the address bar, leaving https://www.yourdomain.com/blog/wp-admin/post.php This is a workaround, not a solution, and if somebody knows how to find and delete the redirect command, a lot of people will be very happy.

I have no clue, but if you find it, please let me know!

Here’s what shows in the address bar after you hit the login button: https://www.yourdomain.com/blog/wp-login.php?redirect_to=http%3A%2F%2Fyourdomain.com%2Fblog%2Fwp-admin%2F

It looks just like the login page. To get on the dashboard, delete back to the wp- and type in admin/post.php and you should be on. I did try replacing my wp-login.php file with a fresh copy, and that didn’t help. I am a psychologist, not a Word Press guru, so hopefully one of our forum friends will help us out!

In the meantime, nobody else can log on to comment.

Hi, Eggo.

You’ve been hacked! Same thing just happened to me. If you look at the address when you log in, you will see a redirect page. Here’s what I did as a short-term solution. Delete all of the redirect info until you have wp-admin/post.php then hit enter. This should give you access to your dashboard. Now all we have to do is to find out from Word Press how to restore our login to get rid of the redirect. Good luck!

Thanks for checking whooami! I thought while I was waiting for someone to help that I might as well learn something new (I have a PhD, but definitely not in computer science) and I was slogging through the validation errors.

I still have a ton, but apparently the two or three I managed to fix also fixed the problem!

I’m pretty motivated to get back to that validation list and fix more…. Thanks again!

The site is https://www.karenfreberg.com/blog/

Because the problem goes away when I delete any new posts, I’m leaving one up called “Testing one two three” so that you can see the dropped sidebars.

Also, my apologies, both sidebars drop, not just the one on the right.

Any suggestions would be hugely appreciated!