Comments on: Recent Hack Attempt on my Blog

By: Dale

Dale — Fri, 23 Oct 2009 10:41:01 +0000

I have come accross several hacks that seem to be automaated, the hacker tries to lump a bit of hidden code into your footer.php below the last tag so its non visable and often hard to find.

But hidden links are a google no no so it screws your site up good and proper!

Having been hacked in the past I am very security aware now

By: Sridhar Iyer

Sridhar Iyer — Tue, 15 Sep 2009 16:44:27 +0000

Hi Dan,

One of the best security protection is moving you blog one-level below the root and calling it to the root, though i couldn’t get time for myself yet for doing it but for many its works like charm,also you can use htaccess methods to increase security also the best thing can be is with wp-content you can rename the same and change the same in wordpress settings, these basic measures can help you protect yourself atleast from most of the brute force level 2 attacks.

Regards
Sridhar

By: SocialMike

SocialMike — Tue, 15 Sep 2009 14:48:50 +0000

No sir.

By: Dan Harrison

Dan Harrison — Tue, 15 Sep 2009 14:42:40 +0000

Very true. Is that your blog Mike? That article is really good. Am going to add it to the main article.

Dan

By: SocialMike

SocialMike — Tue, 15 Sep 2009 14:38:39 +0000

Ah, but as you point out, some sites don’t have plug-ins.

Others have been writing about this recently: http://www.wolf-howl.com/seo/wordpress-seo-security/

By: Dan Harrison

Dan Harrison — Tue, 15 Sep 2009 13:28:23 +0000

Mike,

Well, the developers of WordPress due a very good job. I believe its the plugins that are the weakness, as the code of plugins is rarely security vetted.

Dan

By: SocialMike

SocialMike — Tue, 15 Sep 2009 13:21:27 +0000

WordPress you see… it’s got a big footprint across the web (easy to sniff) and dev-heads don’t build it with security in mind.

By: Dan Harrison

Dan Harrison — Tue, 15 Sep 2009 13:14:24 +0000

John,

Not knowing the reason for the hack is *incredibly* frustrating. However, my only comfort is my frequent backups. Sadly, one of the risks of having a website. Damn script kiddies.

Dan

By: John Essex

John Essex — Tue, 15 Sep 2009 13:09:59 +0000

Hi Dan,

Good to hear the hack attempt didnt cause you too much bother – good job you know what you are doing and had regular backups. I would be a bit concerned at not knowing what the back door was that let them in, I had this with a Joomla site once – it was all up to date with no add ons yet still got hacked. Possibly hacked from another site on the shared server, not much can be done about that and just one of the risks of shared hosting.

By: JTPratt

JTPratt — Tue, 08 Sep 2009 18:35:32 +0000

Thanks for the linkback! Hackers are getting smarter, and the versions of WordPress they’re attacking are getting more recent. It’s important that every blogger learns about WordPress security. Don’t make yourself a victim, you can prevent this from happenning to your site as well!