Comments on: Hack Update

By: Bonus vidéo de la question UGC du Yulblog at Ze Canada

Bonus vidéo de la question UGC du Yulblog at Ze Canada — Mon, 28 Apr 2008 21:57:09 +0000

[...] fait en arrière-scène avec un passage de Wordpress de la version 2.1.3 à la 2.5.1. Après la mésaventure vécue par Patrick, je trouvais dangereux de laisser ce blogue à la merci du premier pirate [...]

By: A Frog in the Valley » Going thru this too bad goo…

A Frog in the Valley » Going thru this too bad goo… — Sun, 13 Apr 2008 02:48:48 +0000

[...] Bad stuff. As described by I never knew » Blog Archive » Hack Update [...]

By: Zelaurent

Zelaurent — Sat, 12 Apr 2008 16:49:15 +0000

Oups! Reçois tout mon soutien Patrick. Merci beaucoup d’avoir partager cette douloureuse expérience avec nous. Je vais travailler son l’upgrade de mes blogues cette fin de semaine ;(

By: hugh

hugh — Fri, 11 Apr 2008 19:10:29 +0000

http://datalibre.ca had the same hack.

By: Patrick

Patrick — Fri, 11 Apr 2008 16:49:08 +0000

Right. I did that but forgot to include it in the post.

By: Boris

Boris — Fri, 11 Apr 2008 16:25:06 +0000

Make sure to change passwords on ALL users on your WP install after this. Part of the hack is (assuming this is the same one) they modify users to allow them to get back in.

;)

By: hugh

hugh — Fri, 11 Apr 2008 16:19:05 +0000

shit.

By: Hamish M

Hamish M — Fri, 11 Apr 2008 15:34:40 +0000

This kind of stuff pisses me off.

I'm glad you've got it sorted out though. Thanks for sharing.

And yes, these types of people need their eyes raped with rusty spoons.

By: Denis Canuel

Denis Canuel — Fri, 11 Apr 2008 12:47:00 +0000

Also look at for eval functions such as this one:

eval(gzinflate(base64_decode('encoded stuff')));

You can often find those in "evil" free themes.