Take the 2-minute tour ×
WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

I just came back to my site from dinner and was unable to find any posts listed in the dashboard.

After snooping around, I found that my .htaccess file was modified, and some new files were added to my home directory. I deleted the .htaccess code, and the files (they all started with PE).

I see that in the last hour a few posts regarding this have been posted on the wp.org forum site.

Is anyone else having trouble with this? Is there any more code for me to delete?

thanks.

share|improve this question
    
Can you add a few urls to the wp forums? I couldn't locate any. –  Denis Dec 8 '10 at 9:31
    
Shared hosting, or private host? It's very possible your permissions were too open on a shared host, ie. 666 on your .htaccess file. –  Annika Backstrom Dec 8 '10 at 12:41
add comment

2 Answers

up vote 1 down vote accepted

See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex. Do a good job cleaing or you'll be doing it all over again. Who is your host? Check with them, too. Some hosts are better than others when it comes to security and helping with cleaning up after hacks.

share|improve this answer
add comment

did you update to v3.0.2?

if not, my guess is that maybe someone used this to gain access to your website and then deleted all your posts...

"This maintenance release fixes a moderate security issue that could allow a malicious Author-level user to gain further access to the site, addresses a handful of bugs, and provides some additional security enhancements."

hope you got backup...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.