My Beautiful Disaster

I just haven’t a clue what to do. My site was hijacked again last night. It’s pissing me off something fierce. What can I do to secure it? Whatever this is, it chmod’d the files it needed to in order to make the changes. I had made everything read only to prevent creation of files and the changing of files. I’ve changed all my passwords now and reloaded everything. I guess setting permissions doesn’t matter if these bots can just change it. Does it somehow have my ftp password? I changed that too. How though? Maybe it’s my host… I’m not too trusting on them anymore. I may end up changing hosts after 4 years. They’ve been good thus far… it’s only after I installed this shitty software WP that I started having problems. It seems they can infect other files on my server after hitting this software.

This one is slightly different than the iframe attacks. It inserts scripts to open up the websites and download a virus. Also, it injects a bunch of nonsense into the top of the files saying something about decode base 64. All that seems to do is crash my site saying something about functions being defined twice. The nice part about that is until I fix it, no one can get a virus and once I reload the files that script is gone… so this hack doesn’t even achieve it’s purpose. It’s still a pain in the ass to reload the files every time. That takes 20 minutes to delete and re-upload.

I’m tired of this hacker bullshit. I don’t know what the fuck is wrong with Wordpress that it’s so unsecure that they allow injection of code. It’s hijacking my site and crashing it. I’ve reinstalled it twice now. I’ve got two last tricks otherwise I don’t know what to do. This is getting tiresome.

I had another iframe injection attack this morning. Luckily, they only infected 4-5 pages which was a quick edit but I had to check every page to see if it was edited. I don’t understand how it works exactly but I can’t figure out how to prevent it. I have done a few things that will hopefully fix it but I’m not sure if they’ll work. Why do people do this? Argh.

It’s not like anyone is posting comments which is fine by me but I had to change it to where a person has to register to hopefully cut down on spam comments. I’m being inundated with this shit everyday now which is unfortunate. I know it’s easy to post crap when you just require a name and email but I wanted to make it easy for any readers and these spammers just have bots fill it out and kill me with it. Blacklisting keywords works some but then I just get tons of spam in another folder and I might end up getting a legitimate comment deleted.

Oh well, it’s not like anyone reads this blog. I’m just ranting because I hate spammers.