WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My hosting company (godaddy) tells me that someone has hacked my wordpress admin login and have put garbage on filesystem. My website is down. and nothing comes up when i try to get my files using mywebsite.com/wp-admin (which I use to manage my files). I am not an expert and had got the site done from outside agency.

share|improve this question
nothing comes up means what ? blank page ? error ? – krembo99 Mar 5 '13 at 16:46
Its blank page. Tried both on firefox and safari browser. Have a mac so dont have IE. – Milind Mar 5 '13 at 18:17

I wouldn't break my mind about which files are exactly mandatory to be replaced. Just replace wp-admin and wp-includes — if he just had access to your wordpress administration I would make sure to check all of the theme and plugins files which are accessible through the administration panel if he included base64 malware code and look-a-like. There are plugins for novice users (no shame) to check for such things - this post at WPMU.org goes over free themes which isn't interesting in your case, however they cover what tools you may use in such a scenario.

Here's the Wordpress Codex Files list which gives you a good overview which files do what, what they control, what they're needed for and so on.

Some links to similar issues (blank/white page):

share|improve this answer
Well it does not make lot of sense. Cause the timestamps on any of the files or folders are older (not matching with since the time the site is down which is just a week ago). to be precise it www.ptsol.com/wp-admin – Milind Mar 5 '13 at 22:29

Godaddy is usually pretty helpful when it comes to this sort of thing. You should be able to manage all of your wordpress login settings etc... through your godaddy account. Have you spoken to godaddy support?

share|improve this answer
I did..They said they cant control the contents once logged in via wordpress admin access. Is there anything specific I should be asking them? – Milind Mar 5 '13 at 16:38
Can you access your site via ftp? That would be something that they could definitely help you with. Tell them you would like to be able to access your site files with filezilla. Once you're in, you can at least back up all of your stuff to your computer, then you will be in a position to figure out how to get wordpress working again. – ItsGeorge Mar 5 '13 at 16:53
Yes I can and I can definitely back it up. However, I was thinking of getting the corrupted/infected files out first so I can get wp-admin and my website up and running and then backup clean copy. – Milind Mar 5 '13 at 17:15
Which are the minimum files that are required to login successfully on wp-admin? Cleaning which files can give me access to wp-admin? – Milind Mar 5 '13 at 17:16
So just to confirm, you can access the site files via ftp using filezilla? – ItsGeorge Mar 6 '13 at 4:55

To all the folks who get this kind of error a must check option. turn on error reporting if you have commented the lines in your wp-config.php


and than check for error. if it has the error like this

PHP Warning: Cannot modify header information - headers already sent by (output started at /[server info]/wp-config.php:77)

than check your wp-config.php for extra space at top and bottom of the page.remove extra line spaces even. and than re-upload the wp-config.php. Most of time this will solve your problem.

Happy Coding!!!!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.