DIYThemes Got A Hacker Smackdown

Was it a Thesis or WordPress Security Hole?

[incrediBILL]

On the heels of the recent thread Wordpress, Thesis and the GPL Smackdown [webmasterworld.com], it looks like a hacker got the last word.

The real question here is:
Was it a Thesis or WordPress security hole that allowed the site to get hacked?

As seen in Google search results that indexed the hacked page:

PLEASE LİNKED NO DELETED ! | PLEASE LİNKED NO DELETED !
Jul 31, 2010 ... <a href=”http://www.dinleyiver.net” title=”mp3 dinle”>mp3 dinle</a> <a href=”http://www.dinleyiver.net” title=”muzik dinle”>muzik dinle</a> ...
diythemes.com/ - Cached - Similar

From their website at the time of this posting:

DIYthemes is almost done with the site maintenance and will be online shortly. Thanks for your patience!

By "site maintenance" I'll assume they mean restoring backups and trying to figure out how the heck it got hacked in the first place.

Not seeing much posted about this yet so hopefully someone that knows more about it than I do can contribute here.

[CiannaLily]

considering who the <argument> was with I would not want to even hazard a guess, it could be a non-well wisher but it could equally be someone closer?

was following the drama and though it was handled well, perhaps not over yet?

[ergophobe]

Uh... Matt hacking someone's site? I don't think so. I think all the WP people have something better to do. But some ill-advised kid wanting to stike a blow against those who didn't accept the GPL but now do? Could be. Strange coincidence indeed.