Comments on: WordPress Hack Alert: sattan.org spam redirect in wp-blog-header.php files

By: defenseconso

defenseconso — Thu, 10 Jun 2010 15:09:18 +0000

http://www.defenseconso.com

nice russian girls

venez rejoindre de magnifiques femmes russes à des tarifs très avantageux.

En partenariat avec l’agence russian lady, l’association defenseconso vous présente sa sélection de très jeunes et belles filles russes.

Mail : defense_conso@yahoo.fr

By: oxyk

oxyk — Thu, 19 Feb 2009 02:17:49 +0000

Hi Geoff, can i ask you to contact me via email. i have a bits of code that was uploaded and some ideas. thanks, oxyk

By: Geoff J

Geoff J — Sun, 08 Feb 2009 16:30:01 +0000

That’s a good thing Doris. I didn’t have much advice to offer beyond the links I already gave.

By: doris

doris — Sun, 08 Feb 2009 13:16:50 +0000

Hi Geoff.. just to let you know that I’ve got the prob fixed via my hosting company… thanks anyways.

By: doris

doris — Sat, 07 Feb 2009 12:29:47 +0000

Hi Geoff, I found your site while searching for a solution to this… do you think you can help? All my blogs (a dozen of them) are facing a redirect :(

By: Geoff J

Geoff J — Fri, 06 Feb 2009 02:57:40 +0000

Alright, here are a few more useful links I'm trying out this time around: Link 1 Link 2

By: Geoff J

Geoff J — Thu, 05 Feb 2009 16:33:25 +0000

It looks like the hack was back this morning so I have not yet figured out how to avoid repeat attacks.

By: Lee W.

Lee W. — Sun, 21 Dec 2008 05:29:22 +0000

Interesting posts.. I found looking for something else.. isn’t that how we find most good information on the web?

I have not seen any mention of the versions of WP that got hacked… would you mind posting that info..

Thanks,

Lee W.

By: Geoff J

Geoff J — Wed, 03 Dec 2008 17:11:29 +0000

I’m not at all convinced it is an FTP problem after all Dusty. When I was initially researching I suspected it was but now I think it has more to do with a backdoor security hole in older versions of WordPress as you mentioned.

By: Dusty

Dusty — Wed, 03 Dec 2008 16:37:35 +0000

Anyone know if it was FTP or not? It seems to me like its an “old wordpress” problem. I’ve removed all remnants of the hack that I can find, and have upgraded all my sites to the latest version of WP.. I’m hoping this fixes things, as we’re on shared hosting (Dreamhost), and if its an FTP issue, it’s going to be a little hard to fix…