travelsuperlink

I see. also when I went to my web hoster admin, I can not use the myphpadmin to read the table, its statue is always in use. Other tables look ok.

Do you think I should try to use the database repair command to try to fix the database myself or just wait…

oh, really? I thought the mysql command like:

SELECT DISTINCT * FROM wp_posts WHERE 1=1 AND 0=1 AND post_date_gmt <= ‘2006-04-10 02:51:59’ AND (post_status = “publish”) AND post_status != “attachment” GROUP BY wp_posts.ID ORDER BY post_date DESC LIMIT 0, 15

is kinda of mysql injection, for example 1=1 AND 0=1 stuff. but I agree I really knew little about mysql injection.

thanks, I will do the upgrade when the table is fixed.

Thanks, Kafkaesqui,

I am contacting my web hoster, so you mean at this moment I can not repair the wp-posts table myself, can I?

another thing concern me is I am runing wordpress 2.01, and I try to understand how the hacker did this. I google for some but still not sure it is through the normal post or some other plugin to do the mysql injection. do you have some suggestion for me to read more about this issue?

really appreciate. Franky