Wordpress suspect files.

[boyfalldown]

All,

My blog has had a few attempted hacks over the last few days. TBH its leaving me tearing my hair out.

Can anybody confirm (as I think) the file \wp-content\plugins\install.php is not part of the wordpress codex. (note this is not the same as the install.php file that lives in the wordpress root directories.

Thanks

Hugh

 

[yoshi]

It's certainly not on any of my 4 wordpress installs
Hope that helps

 

[boyfalldown]

I'd though not. Thanks for that.

I've also had someone try and insert me a nice new shiny plugin called karakozebra. Nice of them

 

[Moz]

Ive just had to kinda reinstall because if a hack i think. My dashboard wasnt displaying properly. Clicky. Reinstall and overwrite all files except config and content folders.

 

[boyfalldown]

I'm afraid this is a hack. I've got a PHP script that should fix the issue in the short term, by correcting your PHP files and removing the malicous code, but you need to do some serious digging if you want to fix it properly and sort it long term

PM me your email address if you want the script

 

[yoshi]

out of interest which version of WP are you running?

 

[boyfalldown]

3.0.1 I don't think its the word press version. More issues with my somewhat crap hosting