Did you have WordPress Site that hacked by someone?. In this few days, i got angry because several of my site were hacked! After several trial and errors, googling, ask friends and lots of plugins activate-deactivate, i can repair my hacked wordpress site.
Did you think that your site is safe?
Check it first!, especially if your site run slowly
There are several kind of “hack” that could attack your site, for this post i will only discuss one sample only. This attack were adding bunch of Hyperlink into our website (we can say as hidden backlinks), and placed before the . This url were hidden by id=”kjzb”.
This is part of the script, to show you how this attack looks like.
- <style>#kjzb {position:absolute;overflow:auto;height:0;width:0;}</style><font id="kjzb"><br>
- <a href="http://www.nbadiscountclothes.com/?dde=k4/">reading pa web design</a></br>
- <br><a href="http://www.custom-paint-works.com/?ade=1709/">embroidery design postcard</a></br>
- <br><a href="http://www.
-
- and still more than 260 links here
Almost 280 Hyperlink were injected by “hackers” into my website, and every page load (in my site), this link were loaded too. That’s why my site becoming slower.
The easiest way to check your site (attacked or not), just open your site and click the right mouse, choose View Source (for mozilla). Scroll down at the bottom of your page.
This attack were not seen by us, if you only open the site. That lots of hyperlink will not show, because they hide by some CSS code.
Css Code that make this Hack hiden
- #kjzb {
- height: 0;
- left: 0;
- position: absolute;
- top: 0;
- width: 0;
Note :
Not all attack were using a same script like this : <font id=”kjzb”>,but i ever see that it also using <font id=”gtbo”>. Use a different style with the same goal, Hide injected backlinks
How to Repair Hacked WordPress Site that attacked by this kind of script?
After googling, and got lots of advice from friends, there are several plugins that suggested to me :
1. Exploit Scanner – Scans your WordPress site for possible exploits.
2. AntiVirus – Security solution as a smart, effectively plugin to protect your blog against exploits and spam injections.
3. WordPress Firewall 2 – This WordPress plugin monitors web requests to identify and stop the most obvious attacks.
4. wp secure
5. Host Monster also recommend this : TimThumb Vulnerability Scanner
Is this all plugins could Cure this attack?. In my case, all that plugin could not works, or found nothing that suspicious. Maybe the hacker’s script block that plugins to work.
So, how to Cure it?
Finally, after several trial and error with all of that plugins, here i give you the step by step to Cure this WordPress Hack Attack.
Step by step Repair Hacked WordPress Site
After you do all that step above, try to re-open your site in your browser, and see the source code. You will see that “Injected backlinks” were gone.
Unsucceed with this step? Leave comments, maybe the other could help!.
Facebook comments: