I have a client with his wordpress site hacked. The hackers added new folder and files and changed the index.php. I would like to know if when this happens, Could the hacker add also malicious code inside the pages, posts, comments or even images? I suppose the hackers inject the code in common wordpress files like index.php or footer.php , something that is always displayed. Am I right?
-
4Possible duplicate of How do crackers upload php scripts to Wordpress' wp-content directory?. Also WordPress hacked, found suspicious file, My Hacked(?) Wordpress Sites and lots of others– Steffen UllrichNov 27, 2016 at 8:49
-
1is not the same question, he asked how the hackers injected files in his wordpress and I'm asking which files can be affected, are also pages and posts vulnerable to be code inkected?– Daniel GilNov 27, 2016 at 9:00
-
4Have you looked at all the other questions here which ask about wordpress hacks? Also, if the site is hacked or if you have an insecure or even malicious plugin everything can be effected including but not restricted to changed PHP files, images, posts, comments...– Steffen UllrichNov 27, 2016 at 9:12
-
4See also our canonical question on how to deal with a compromised server.– S.L. Barth is on codidact.comNov 27, 2016 at 9:19
-
thanks S.L. Barth, it was a good article. So, if I should not use the same data from a hacked website, although I have a backup teoretically previous of the attack, What should I do? Write manually (without export/import) all the pages, posts and comments?– Daniel GilNov 27, 2016 at 14:38
Add a comment
|