Site Getting hacked

[nupuriepl]

Hi There,

My one Website gets hacked Again and Again, I had Reset  Many times ,But again, Also generating unnecessary URLs to My website in Webmaster tools, Can anyone Help Me To Solve This Problem please?

please help, thx in advance,

[ChrisAshton]

This type of thing is generally better addressed by someone with more dev knowledge but one thing you may want to check is your versions of Wordpress and plugins.

Try to keep everything up to date since updates are often released to patch security flaws and if you're running any plugins that aren't really necessary, consider removing them as well. Doing so can often help your site speed and it also removes a potential vulnerability.

The only time we've experienced the same site getting hacked several times in a row it was through vulnerabilities in a particular form plugin.

[nupuriepl]

Hi Chris ,

Thanx For Reply

we have always get all things updated, and also theme is self designed not dummy code.plugins & WordPress All are Updated.

Then Also It Happens Again & Again.

[donford]

Hello,

The one thing popular CMS sites have in common is they are primary targets. This is especially true to open source or free systems like WordPress, Joomla, Drupal, Oscommerce, this is because the hackers are available to download and review the source code. In addition to this, many people contribute to these projects which provides additional opportunities for security holes.

There are whole websites out there that share techniques to hack these high profile CMS, complete with scripts and how to guides. Its unfortunate, but some people "enjoy" other people's pain.

The one thing you must do when you choose a CMS like this is to continue to upgrade versions and stay on top of the latest security vulnerabilities and fixes. If you hired your build out, you should factor in a continual support package because you will always need to upgrade and patch.

My suggestions is to visit your sites help forums, chances are there are some answers there for you. There are many precautionary things I could suggest but the primary thing you need to do take your site offline, identify the security hole, restore from a backup and patch it.

Good luck,

Don

[donford]

You should also evaluate who at your company has access to passwords. Did you hire any part of this site out?

People who have access to the site could knowingly our unknowingly be the problem.

[nupuriepl]

hi donford

Thanx For your Valuable reply.

But I have not given Access to anyone, other then Me.

[Xtend-Life]

Hey,

When you are fixing the website do you roll back to a save version of the website or just change password?

Most likely there is Malware hidden away which if you do not remove will allow them to keep doing the same thing. I think generally backups go back 2 weeks but if your server provider has copied a hacked version you will need to remove the Malware manually - not fun.

I would Google the plugins you are using and see if anyone has been hacked using that plugin.