Tag Info

Hot answers tagged

4

When you write PHP code, you can do just about anything. So when you run the code of a plugin it can do just about anything as well. It can query the database and get whatever info is there (which is why it's a good idea to store passwords as hashes.) Since it can query the database, it can also delete anything in the database, ruining settings, turning ...


4

WordPress is inherently quite secure software, because of open source, extremely wide installation base and reasonably fast security updates. There is no such thing as security plugin that magically increases security, while causing no conflicts. Security plugins either act to monitor situation and inform you after the fact (important, but it's not ...


4

The virus part is going to be off-topic, but yes a fresh install is the way to go. What I would do to upgrade the site is: Backup everything-- PHP and database Install the old site on a development server. Before running the site, replace all of the core files with new 2.8 ones from the archive. This will hopefully fix the suspected virus problem. Then ...


2

Yes. Yes. Yes. All of these are not only possible, but also easily encountered in the wild. There had been whole waves of self-spreading WordPress malware for some older insecure versions. Everything WordPress has access to - any theme or plugin has access as well. Stealing or ruining data is trivial for code running as WP extensions.


1

Disclaimer - I am not experienced with multisite specifics. This depends on amount of access user is given: ability to submit/run PHP code in any form - bad, should never be allowed; ability to submit unfiltered HTML (+JavaScript) - unlikely to compromise installation itself, but can be abused to post malware on frontend. Overall this is quite specific ...


1

Dear you don't need to worry about much - if its a fresh installation and you don't have any data on your website - eg post, article, images or anything then I prefer you t install a clean fresh wordpress again from the sketches after a complete scan of your hosting. and if you have data in your hosting I am sure you can access your data base from cpanel or ...



Only top voted, non community-wiki answers of a minimum length are eligible