Advanced search

Please don't promote blogs that aren't in the Mumsnet Bloggers Network. Join the network

My blog has been hacked. <wail>

(51 Posts)
FrauLindor Sun 25-Sep-11 12:14:10

Or rather the website of the webhost has been hacked.


Why do people do this? What do they gain from it?

TrillianAstra Sun 25-Sep-11 12:35:16


TrillianAstra Sun 25-Sep-11 12:35:49

It'll only be the front page, you should be able to replace it pretty easily.

Tee2072 Sun 25-Sep-11 12:40:22

Well, FFS!

They gain notoriety and fist bumps from their equally living in their mum's basements and living on coke and crisps with no girl in sight friends.

In other words, nothing but cred. Not like they hacked a bank or something!

I hope they get it sorted soon.

Change your passwords!

FrauLindor Sun 25-Sep-11 12:44:24

I cannot access my cpanel to do that though.

Someone on Twitter posted this but I am totally lost

Tee2072 Sun 25-Sep-11 12:51:29

Do you have FTP access to your site? Or is totally through CPanel?

Because you can only fix it the way that site says to if you can get to your root directory.

TrillianAstra Sun 25-Sep-11 12:52:25

I am only saying what I have been told, "pretty easily" is of course relative... hope they get it sorted soon, although being California based they won't be out of bed for a while.

FrauLindor Sun 25-Sep-11 12:56:13

Ok, have cpanel back

Tee2072 Sun 25-Sep-11 12:57:26


I would, if I were you, ask them if you can have FTP access to your site as well. That way you are not reliant on CPanel to make changes when things like this happen. As Trill said, the company is based in California so if they ever get hacked even worse it could take much longer to be able to get into CPanel.

FrauLindor Sun 25-Sep-11 12:57:47

what is the root directory?

How do I fix the index thing?

Tee2072 Sun 25-Sep-11 13:03:53

I have no idea what your CPanel looks like, but do you have a list of files in there?

If yes, then open index.html and, provided the code in there looks like that that website shows, replace it with the code at the bottom.

If it doesn't, or if you can't find the index file, you'll have to wait until the host gets things fixed for you.

Tee2072 Sun 25-Sep-11 13:04:57

If you want to trust me, you could PM me your cpanel address and log in and I can take look for you.

FrauLindor Sun 25-Sep-11 13:10:27

Tee, will do that. I trust you.

FrauLindor Sun 25-Sep-11 13:10:43

I have got rid of the hack, but cannot get the index thing to work

Tee2072 Sun 25-Sep-11 13:10:50

Bwhahaha! ::rubs hands together::


FrauLindor Sun 25-Sep-11 13:17:24

Do you need the cpanel link?

I just reported it to MNHQ. Ignore my strange message, MNHQ. I clicked report instead of message poster.

Tee2072 Sun 25-Sep-11 13:19:29

Yes, I need the CPanel link!

FrauLindor Sun 25-Sep-11 13:25:19

Have sent you everything, Tee

If I get a big credit card bill from John Lewis, I will know who to turn to

Tee2072 Sun 25-Sep-11 13:29:22


My husband says you owe me a £1 as I shouldn't work for free. I pointed out it took me 5 minutes, hence the £1. grin

And how did you know it would be John Lewis?!? [looks suspicious]

FrauLindor Sun 25-Sep-11 13:31:13



<covers Tee in sloppy kisses>

Thank you so much.

I owe you much more than a £1

Tee2072 Sun 25-Sep-11 13:33:19

Really, you had it! They just change the fix and you missed that part!

At least, the code that I replaced looked like the code from that website.

breadfortheboys Sun 25-Sep-11 13:41:31

So glad it is fixed <paranoid now>

FrauLindor Sun 25-Sep-11 14:08:17

Have scheduled back up now, didn't have it set up on new blog yet.

FrauLindor Sun 25-Sep-11 14:17:53

Right, someone has just posted this

Webhostinghubs is a subsidiary of Inmotion hosting and both were hacked this morning at 4:30 EST (I was working on a client site)many other reseller of these companies.

Changing your index file is just step one. You need to re-install WordPress (manual re-install) as the hacker has modified a few files in the core as well. As soon as you get it running, export all your content, database and wp-content directory and wait for the next attack. If in-motion decides to backup everything, you will lose your latest posts and modifications so back up yourself before they get to it.


I have exported content, as stated here:

When you click the button below WordPress will create an XML file for you to save to your computer.

This format, which we call WordPress eXtended RSS or WXR, will contain your posts, pages, comments, custom fields, categories, and tags.

Once you’ve saved the download file, you can use the Import function in another WordPress installation to import this site.

Choose what to export

All content This will contain all of your posts, pages, comments, custom fields, terms, navigation menus and custom posts.




Recipe Steps

Recipe Ingredients


Is that what he means?

Should I reinstall WP? What does that actually mean? Newly download?

FrauLindor Sun 25-Sep-11 14:20:44

Just noticed that my dashboard is not there. Was that when I was faffing about earlier?

Join the discussion

Registering is free, easy, and means you can join in the discussion, watch threads, get discounts, win prizes and lots more.

Register now »

Already registered? Log in with: