quix0r

I have “solved” this by enabling “SMTP-AUTH” with TLS on my mail-server. Just google a little and you will find somehting usefull.

??

@pozhonks: Thank your for this tips. I have done it all now.

Might it also be a good idea to remove xmlrpc.php or is this *maybe* secure? I have 277 access attemps by a user-agent called “Internet Explorer 6.0” and as far as I guess its something like an exploitable-xmlrpc-search-bot???

I will try to write a “special version” of the well-known “Cracker Tracker for phpBB2” for WP. Or maybe Bad Behavior is enough to protect your site for the next time?

He? GIF and CSS files? Is that the referer?

What plugins are you using? They tried it very often here to “starhack” my entire server but I was still able to lock them out because I use some sort of IP filter and the Cracker Tracker by cback.de (I have patched it a little).

Can you also post some log entries here?

I forgot to mention that you need to patch your comments.php to get this plugin working for you. So I have updated the documentation. Also the above checksums are no longer valid. Please use these instead:

MD5: 85fb7d27ab315214f236b5e6e39c240d
SHA1: 61f69b206d961ffa98d1308c9f0958f47261896e

Quix0r

You may want to edit your header / sidebar template to link to an external guestbook. Then edit the guestbook’s templates to let them look the same as your blog and not guestbook.

Done. ??

I use a plugin for this:

https://www.bueltge.de/wp-feedstats-de-plugin/171/

It’s not so nice graphics but still good enough for me. ??

Here is the (nearly) english source code:
https://www.bueltge.de/wp-content/download/wp/wp-feedstats_en.phps

I don’t have such problems here. Well, I don’t have so much high traffic on my weblog. In includes/wp-db.php WP is using mysql_connect() by default. Maybe you want to change this to mysql_pconnect() ?