06.26.08
Enemy Agents in the Empire
My blog is increasingly getting hacked with hidden spam ads; I have to delete them every few days, and Google is threatening to drop my blog from their search engine. Apparently this is a common problem with WordPress. Well, today I notice that my archive.php file is now misspelled arhcive.php, and starts with “Merhabba my friend” (misspelled Turkish!), but I’m not computer-savvy enough to know what to do without making it worse. Any advice?
Alex J. said,
June 26, 2008 at 12:14 pm
Usually comments get turned off on a post a week or two after it gets posted. Hardly any legitimate comments get added to a post after a certain point.
Matt said,
June 26, 2008 at 12:20 pm
Get the newest Wordpress version: 2.5.1
You appear to be running 2.0.2 which is at least a couple years and several versions old.
Administrator said,
June 26, 2008 at 2:41 pm
To Alex J.: I’m not talking about comments, I’m talking about hidden ads actually inserted into my code.
To Matt: My blog software is provided by Yahoo; they supposedly handle all updates automatically.
bile said,
June 26, 2008 at 4:48 pm
Are you sure about the auto updates? I’m not familiar with yahoo’s hosting service but some use automated scripts to install WP and other packages. Those scripts may update for you but it wouldn’t happen automatically. That’s dangerous. Moving from 2.0.2 to 2.5.1 may cause issues because a lot has changed since then. If possible I recommend setting up a 2.5.1 install somewhere, export the data from WP 2.0.2 and import it into 2.5.1. It may require some tweaking of the theme, etc.
Or contact Yahoo support about upgrading.
Black Bloke said,
June 27, 2008 at 11:25 am
Will any of these links help?
http://www.theosquest.com/2007/03/24/success-upgraded-to-wordpress-212-on-yahoo-hosting/
http://wordpress.org/support/topic/178892
I certainly hope they will.
Matt Robison said,
June 27, 2008 at 2:43 pm
Yep, definitely update your version of wordpress. The latest version fixes these security holes.
Matt said,
June 27, 2008 at 7:39 pm
You might find this useful
http://www.blogstorm.co.uk/how-to-use-google-alerts-to-find-out-if-your-site-gets-hacked/