WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My site, http://www.cancer-study.com, has been hacked, and I can't login to wp-admin.

Can you say how it has been hacked and what can I do to undo the damage? I have access to the host.

share|improve this question

closed as off topic by toscho Jun 23 '12 at 7:32

Questions on WordPress Development Stack Exchange are expected to relate to WordPress within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 5 down vote accepted

If you do a Google search, you will find many topics on this.

Here are some links:

First read this: http://codex.wordpress.org/FAQ_My_site_was_hacked

Then take a look at these links:

If you have access to your database, login using PHPMyAdmin and change admin username / password, delete users you don't know and change password for rest.

Then start the process of backing up data and do a clean install.

Note. If you can't find out how they got access to your site, doing a clean install and putting back data, will still leave whatever hole open.

Also not that backdoors (links / code) could have been added to your posts, so all content must be checked before you import exported data.

share|improve this answer
Great answer, thanks! – Ash Aug 19 '11 at 15:08

Not the answer you're looking for? Browse other questions tagged or ask your own question.