Blog Repair Needed - Will Pay!

Hi, guys:

I have a blog that has been hacked and it's sort of cleaned up, but am not 100% sure and I need help with this. I have looked into this for the past month and read a lot on the subject, but am at the mercy of my limited knowledge.

If you or someone you know can help, I would appreciate it. My budget is small though, I can only afford up to $50 for help - at this time. The hack is a SQL injection and essentially it brings up bad results in Google for certain search queries on this blog. A major headache and heartache.

Can anyone agree to help? Let me know please. I'm available for this around the clock. (CST timezone)

Kindly,
Missy

Missy:

I would be glad to help. I suppose there is no backup ?
The hosting provider usually does backups daily or weekly.
Have you tried getting the hosting to restore a backup from the day before it was hacked ?(If you know when that is)
You said it was sql injection, which I would assume WP itself is not susceptible to, so do you think it was a plugin ??
SQL injection is when an unexpected entry is placed in an input field that causes the program to do something unexpected. Usually used in the login field,to gain admin access to the site.
Anyway let me know where you are with this and I will see what I can do. I don't want money , but I am sure we can trade out something that would help us both.
Pablo

Hi, Pablo:

Thanks for responding. Appreciate it and hopefully we can work something out. Will send you a PM with further details.

Cheers,
Missy

I know you don`t want to spend much-- But heres a website in the future provides security for your Wordpress blog. wpsecuritylock.com. **Just for the future!:)

Regina Smola (wpsecuritylock.com) is great! and she's an Elite Member too. She's doing a webinar on Mar 21st on security.

I monitor my sites for both up/downtime and file editing. The latter can drive you nuts w/ false alarms ( updates, etc will set it off). I just started using Jumple for malware monitoring.

I just battled a boatload of login attempts in the past couple weeks. They were relentless, but I think they finally gave up. It was so frustrating!

Are you the only one that posts regularly? If so there are plugin that will whitelist your IP or IP's , so anyone logging in from another IP address will not be able to- plus some will block those that try.

Good luck

Hi, Kathy:

It has been a complete nightmare, mostly because I am so deficient in this area. As you speak I have no idea where or how to check for possible login attempts. I've had two people update my database and upload a new install of Wordpress, as I have back ups of the blog dating as far as a year and the hack happened in early January. So a clean back up was used.

However the traffic has not returned yet and bad results still sit in the Google cache. My type of hack attack is a real sneaky bad one that only those who search via Google, Yahoo or Bing see. If I go directly to my site (as most admins do) they wont see what "searchers" see. According to several people the blog is clean, yet I just don't know for sure. And as I mentioned before the traffic is still nowhere near how it was - prior to the attack.

My next avenue for this problem is to try the Sucurri site - someone recommended to me.

Thanks all for your comments, feedback and tips. Will keep you all posted, and hopefully fingers and toes crossed that there's a happy ending here.

Hey Missy,
Not 100% sure what you can do about restoring but check with Liz Jamieson Elite member - she offers a service to protect your sites for just $17 per month - it basically 'hides' your sites server behind another 'super pentagon protected' (my words and explanation of how it works) server so that when hackers are attacking your sites they don't even realize they are actually attacking another server. Same service also speeds up delivery of your site too - bonus!

Cheers,
Deb

@Debra:

Thanks for the good tip, will keep it in mind.

Cheers,
Missy

For those following and wondering what's going on with my blog hack attack situation. See the screenshot below which shows a series of spam links in my wp admin dashboard on the affected blog. I've been told the blog is safe and the hack is gone, but WHY on earth would these links STILL (as of today) be showing up on my Wordpress admin area.

Attachment 386

Anyone familiar with this type of blog hack? Please chime in.

That's not a hack, it's just links from other sites coming to yours. It's unfortunate that they're links that claim you're selling prescription drugs, but it's not harmful.