Take the 2-minute tour ×
WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

Last night I wrote a mildly controversial blog post about religion on my weblog, and this morning I woke up to find that my display name had been changed to the name of a fanatic religious leader. The name was actually added to the user_meta database; deleting that value reverted my display name back to my username.

How could this happen and what can I do to protect against it?

share|improve this question
    
You're lucky that's all they did. –  Dunhamzzz Sep 23 '11 at 8:14

2 Answers 2

Make sure to protect your file directories, don't make them writable by you only!

Red up: http://codex.wordpress.org/Hardening_WordPress

And download: http://wordpress.org/extend/plugins/wp-security-scan/

share|improve this answer
    
Thanks, that helps... still, it's strange to think that someone was actually able to break into my site - I don't know what went wrong. –  yuttadhammo Sep 23 '11 at 3:48

Also ALWAYS use the lastest version of WordPress and use quility plugins.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.