Cleaning Up from Wordpress Hack
Let me preface this post by saying that I really, really like Wordpress …
However, I’ve been cleaning up a mess that injected spam into my blog for a while now. The hacks consisted of two types:
- Comments that injected spam links
- Hacked template files that imported scripts with spam links
If you use Wordpress, make sure you take a close look at your source code. Better yet, lock down the permissions on all your template files. This will not allow you to use the online theme editor that Wordpress provides, but for most of us, it’s an acceptable trade-off.
I don’t understand the cause of the security breach, but have been more diligent ever since about updating to the newest version of Wordpress whenever it’s released. I’d suggest all bloggers do the same. We’ve got to stop the spam.
Some links for more info:
- Expunging the wordpress.net.in spam injection hijack
- Hacked! Never let your theme files writable!
- Wordpress Spam Injection: ‘Goro’ hacked my blog
14 comments July 8th, 2008
