When I woke up this morning, I went to delete a spam comment that got through my defenses, but WordPress wouldn’t let me log in. I tried my login and password a few different times and got nothing. That’s when I started to get that feeling. You know that one I’m talking about?
“This site hacked by” whatever the name was. I’m kicking myself for not getting a screenshot of it, but there was a large wolf image with some language that I was unfamiliar with. There was also a sound file that was posted along with it. It started out with some deep voiced man saying something very foreign, followed by some drums and horns. I was still sleepy eyed and increasingly pissed off that I didn’t take in all the details.
I was able to work around WordPress and get into the SQL database, delete the post, and get my user accounts reset. On top of that, I was running WordPress 2.0.3. I might have waited too long to do the 2.0.4 upgrade that apparently had some “important security updates”.
I’m not sure how this person hacked my site, but everything seems to be back to normal. I’ve done all the neccesary steps. Backed up my site, changed all my passwords, and done needed upgrades. All this after being knocked down with a troubling sinus cold thing all this week, this morning being the first day that I’ve woke up and actually felt good. I’m totally going running right now because that’s a lot better than punching a wall.
Update: Rebecca was able to grab a screenshot of it this morning and has it on this post.
don’t you go punching no walls a) can’t afford the healthcare for you, my non-insured hopeful-immigrant husband and b) our lease is up at the end of the month :p
looks like you got everything back on track, that really sucks but obviously there’s lots of support from wordpress, the forums etc.
I’m glad you were able to get your site back up. I broke out in a cold sweat when I read that people could actually hack in and take over. I’m likely not nearly as tech savvy as the rest of Vancouver’s blogging community and it would definitely take me longer than a single day to get the problem solved.
It took some quick thinking on my part, but all seems to be well again. Folks over at WordPress have been alerted about the situation in case this is a bigger security issue. They want me to check back in with them if anything else happens. I’m REALLY hoping nothing does.
I should probably take a hint from your experience and get my butt in gear and up myself to 2.0.4 Then again that makes me wonder what stupid teenager has the free time to hack someone’s blog? Honestly it’s a blog…not Microsoft or some news site or yeah…anyways I’m glad to see you’ve got it all set back up properly.