[wp-forums] Hacked Query

[Jan Dembowski]

On Fri, Feb 8, 2013 at 6:21 AM, Andrew2.Nevins <
Andrew2.Nevins at live.uwe.ac.uk> wrote:

> Actually, now that I'm writing it out, it seems that'll just remove the
> symptom and leave the hack. Right?
>

Yep. Doing a search and replace just deals with the symptom and doesn't
close the door that the attacker got in via. They might fix the symptoms
but the problem will be back.

If you're on a VPS or a dedicated box then locking down your server and
WordPress installation really isn't that hard (who else would you effect?)
 But on a shared host it could be a real pain. You can only lock down your
portion but an insecure host is the worst to be on.

Jan Dembowski