Tell me more ×
WordPress Answers is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.
up vote 1 down vote favorite
1

I have a little demo site (admin details are listed publicly), and I've configured the wp-config to disallow file edits, so in theory no one can install a theme / plugin.

define('DISALLOW_FILE_EDIT',true);
define('DISALLOW_FILE_MODS',true);

Yet lately I've noticed strange plugins & themes being installed on my demo site. I can see in the apache logs that they've been trying to access plugin-install.php but failing with a 500 error.

The folder permissions are 755 on both plugins & themes, so the files can execute but only the user has write access.

Does anyone know how they might be doing it / where I'm going wrong?

Thanks

share|improve this question
If you would post a couple of the full log entries it would help. I suspect this is a bot trying to get access to the site-- just a guess. – s_ha_dum Jan 28 at 19:42
Seems my host only keeps the apache logs for a day :| – user1958047 Jan 29 at 11:51
Basically, requests were made to plugin-install.php and failing with 500 error... yet the plugins made it through. Could another plugin allow them to install a plugin on WordPress? – user1958047 Jan 29 at 11:53
Your description worries me, especially the part about the plugin making it through. It sounds like you have a security problem but I don't know that it can be solved in this venue. – s_ha_dum Jan 29 at 14:20

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.