Restoring an Exploited WordPress files

I previously had a 10 step process to replace all the files in a wordpress, this got rid of most file based exploits. Since then i have written a shell script that pretty much incorperates that wget http://blog.rimuhosting.com/files/restorewordpress.sh chmod +x restorewordpress.sh ./restorewordpress.sh /full/path/to/documentrootwget http://blog.rimuhosting.com/files/restorewordpress.sh chmod +x restorewordpress.sh ./restorewordpress.sh /full/path/to/documentroot Note: This does not do custom… Continue reading Restoring an Exploited WordPress files

Finding Exploits and Trojan php hacks on a website

Its always unfortunate when you are exploited, and the best method to fix a site is to wipe and restore from a known backup as well as track down the entry point they gained access and fix it. Sometimes you need to 'clean' a site of these files before migrating things over however , or… Continue reading Finding Exploits and Trojan php hacks on a website

Fixing apache file and directory permissions

I've seen this problem a few times, people having trouble getting the permissions right for websites. Heres a quick fix that will sort you in most cases For directories run find /path/to/domain/public_html/ -type d -print0 | xargs -0 chmod 755 Files run this one find /path/to/domain/public_html/ -type f | xargs chmod 644 Make sure you… Continue reading Fixing apache file and directory permissions