Reaper-X

Ask your host to set allow_url_fopen = on or edit php.ini manually if you have access and you’re sure about the security implication by doing so

I have no problem simulating your auth digest (in other words, it works fine even with custom permalink) by placing:

<Files wp-login.php>
AuthType Digest
AuthName "blah"
AuthUserFile /home/blah/.htpasswd
Require valid-user
</Files>

inside the wordpress rewrite rule or outside wordpress rewrite rule (located before wp rewrite rule or after wp rewrite rule)

Have you tried using CG Redirect ?

Wow your site looks like a busy site, and i think you should try to use WP-Cache first as thugparlay said, or try disabling unused / rarely used plugins.

But if you want to change host, make sure to check them first and read every review carefully. hint : try searching for grid server

As for the CPU usage, it can be caused by many things, especially if you’re using dynamic page (in this case it was php) and your site get lots of visitor daily

I dont think ALinks caused that problem because im using it on my blog.

And i see that you’re using Ultimate Tag Warrior as well, but because i use it too then there’s no problem with UTW.

as for the other plugins you’ve installed on your blog like Quoter plugin, Contact Form, WP Pager, Live Comment Preview, Lightbox, etc .. i dont know about it. But try disabling these plugins first.

Btw how many visitors did your site get daily ?

Have you tried using Search Meter

the correct directory would be /wp-content

Ask your webhosting provider to disable open_basedir restriction

Restore your backup (i mean all of your files and sql backup), but i think it’d be best to delete everything on your site first (if you only run one site on your host) because the hacker was able to create meta refresh on your page to redirect automatically to their page and they put it on all links on your page

here’s an example :

#page { background: url("https://lowfaresairline.co.uk/blog">"">>>><meta http-equiv="Refresh" content="0;url=https://g3n3t1x.org">""">/wp-content/themes/default/images/kubrickbg.jpg") repeat-y top; border: none; }

btw you’re running wordpress 2.0.4 and got hacked ?

probably you mess something with the code, try using another theme and see if its caused by coding error or not

To search / browse everything in your database use phpmyadmin (most webhosting already included this) or other sql frontend

Any clues as to what happened? I opened the file in question and there is no line 538

actually there’s 1036 line in functions-formatting.php (WP 2.0.4) file if you did opened that file .. but just like moshu said try reuploading .. but instead of uploading the wp-includes directory try to re-upload everything

MySQL 4.1 and above are using new password encryption and in order to use old authentification with MySQL 4.1 ++ you must put this parameter in your mysql configuration file (usually my.ini if you’re not changing the default configuration path)

old-passwords

and after put that parameter into my.ini restart the mysql server (i assume you’re installing fresh install on localhost) because most hosting service already use this parameter. After doing that step, reupdate your account or if you’re using root account as the user update that too otherwise update only your mysql user account

That’s it finish =)

if your sql database server is not located at the same server dont forget to edit that line too (on godaddy server you must edit it because the sql server was located on different host)

just delete this line because its not needed :

&$3=$4&$5=$6&$7=$8 [QSA,L]
</IfModule>
# END FAlbum

edit: forgot something, actually that’s what caused your server goes into berserk mode