Forum Moderators: rogerd & travelin cat

Message Too Old, No Replies

hit with the "jquery" hack on 6/19

         

super70s

4:44 am on Jun 22, 2016 (gmt 0)

10+ Year Member Top Contributors Of The Month



I was hit with a hack on June 19, after a big hassle I think I have deleted all the bad code.

I have installed the Wordfence plugin to protect from similar attacks in the future, however it's the free version. It's apparently 30 days behind in the virus definitions, but at least it's better than nothing. Also I have activated its "extended" protection which goes into action before WP starts.

Is this a good plugin to ward off hackers, or is there another (free) one I should consider? I picked Wordfence because it seemed to have the most users, over 1 million so I thought it must be pretty good.

martinibuster

6:01 am on Jun 22, 2016 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



As I understand it, the jquery hack does not mean that jquery is compromised. It's a hack that mimics a link to jquery. So to prevent it this is pretty much what you need to do:

Keep your passwords difficult.
Update all of your plugins and WP itself
Update all of your server software (if you're on a shared server then make sure it's updated. If it's not then call your customer support). Google around if you don't know how to test a server.

super70s

5:32 pm on Jun 24, 2016 (gmt 0)

10+ Year Member Top Contributors Of The Month



It's all moot now because the server administrator (or someone above him, he's a reseller) has apparently terminated my account, even after I cleaned up all the malware.

It was the Article Directory theme, and I have another php-based, non-WP article directory script I can use on different hosting.

It's a shame though because I lost a whole lot of work with the WP site -- both with all the articles I edited and uploaded, and the tweaks I did to the theme to get it the way I wanted it.

martinibuster

4:09 pm on Jun 27, 2016 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



UpDraft Plus WP Backup and BackUpWordpress are two excellent backup solutions. UpDraft Plus worked excellently for restoring a WP installation that was completely lost after I accidentally broke my dedicated server and had to re-image it to restore the box.

Probably number one rule for everything: Assume the worst, back everything up.

If you're reading this and have a WordPress installation but don't have a back up solution, get one now. It's critical.

teaandbiscuits

12:14 am on Jun 28, 2016 (gmt 0)

10+ Year Member Top Contributors Of The Month



This is mysterio to me.