Blank

Archive for June, 2008

WordPress Hack

Thursday, June 26th, 2008

It turned out that the upgrade did not solve the problem as it was header.php in my theme that was modified to include a <u> element with display:none that included a long list of bad links. (see excerpt at http://www.pastie.org/223173 ).

I assume it happened via sql injection that I hope had been resolved in WordPress 2.5.1

I assume it got in via sql injection that the new version has solved.

Hacked

Wednesday, June 25th, 2008

This blog has been hacked in a very peculiar way. See the summaries for the various blog entries on Google:

Google’s cache and the pages themselves seem “clean” - no mention of various drugs and such and no “bad” links. So I am unsure what is the benefit to the hackers. In any case I used this as an opportunity to upgrade to WP 2.5.1.

Hopefully the problem will go away when Google & Yahoo reindex.