{"id":856,"date":"2012-02-16T19:11:23","date_gmt":"2012-02-16T06:11:23","guid":{"rendered":"http:\/\/www.c2s.co.nz\/blog\/?p=856"},"modified":"2012-02-16T19:11:23","modified_gmt":"2012-02-16T06:11:23","slug":"site-got-hacked-pictures-and-things-missing","status":"publish","type":"post","link":"http:\/\/www.c2s.co.nz\/blog\/site-got-hacked-pictures-and-things-missing\/","title":{"rendered":"Site got hacked &#8211; Pictures and things missing"},"content":{"rendered":"<div class=\"8781ca4f97038dd0d58a1ad8af045721\" data-index=\"3\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script type=\"text\/javascript\"><!--\r\ngoogle_ad_client = \"ca-pub-6411751809866006\";\r\n\/* BlogHorizontalSlim *\/\r\ngoogle_ad_slot = \"6442664612\";\r\ngoogle_ad_width = 468;\r\ngoogle_ad_height = 60;\r\n\/\/-->\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"http:\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\n<\/div>\n<p>So I got hit by the bug in WordPress-3.3.0 and basically a little over a dozen sites of mine were hacked shortly after New Years Day this year. Got them all back up and running (What a PITA that was), but it means there&#8217;s no pictures coz I nuked all of them in my rush, as well as the backups that I had.<\/p>\n<p>Here&#8217;s how I fixed it:<\/p>\n<ul>\n<li>Move the folder so it&#8217;s not web-accessible<\/li>\n<li>Extract a fresh copy of wordpress<\/li>\n<li>Copy the wp-config.php file back across, but clear up the first line before you do which usually contains some exploit<\/li>\n<li>Modify the rows such as &#8220;define(&#8216;AUTH_KEY'&#8221;, and delete one char from each of the keys, and replace it with something else random. This prevents any cookies that may be saved from working.<\/li>\n<li>Check your SQL &#8212; Chances are they&#8217;ve not bothered, coz they just wanna do a 301 &#8220;permanently moved&#8221; redirect, not piss around with your SQL.<\/li>\n<\/ul>\n<p>Then you can slowly go about restoring the files from your wp-content directory, as well as themes etc&#8230;<\/p>\n<p>It&#8217;s a pain, but I&#8217;ve found that to be the easiest \/ fastest way to do it.<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>So I got hit by the bug in WordPress-3.3.0 and basically a little over a dozen sites of mine were hacked shortly after New Years Day this year. Got them all back up and running (What a PITA that was), but it means there&#8217;s no pictures coz I nuked all of them in my rush, [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[4,5],"tags":[380,379],"class_list":["post-856","post","type-post","status-publish","format-standard","hentry","category-how-tos-guides-tech-info","category-personal-rantings","tag-hack","tag-wordpress"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pWi3e-dO","jetpack_featured_media_url":"","_links":{"self":[{"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/posts\/856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/comments?post=856"}],"version-history":[{"count":1,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/posts\/856\/revisions"}],"predecessor-version":[{"id":857,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/posts\/856\/revisions\/857"}],"wp:attachment":[{"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/media?parent=856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/categories?post=856"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.c2s.co.nz\/blog\/wp-json\/wp\/v2\/tags?post=856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}