Feb 27 2010

How was my WordPress site hacked?

For context please read over my previous question.

http://stackoverflow.com/questions/2329371/wordpress-website-is-automatically-redirecting-after-load

Thanks to all of you who helped and advised in that last question. The site is cleaned up now and I thought would offer a few clues I noticed during cleanup and was wondering if anyone might could offer some ideas as to HOW the site was hacked?

The bottom line is that the database had 2 admin users that I had never added or made into admins. (Of course they can add themselves though registration but should not have been admins.) These users did NOT have email addresses entered which should not be possible.

The other wordpress sites that are using this same database (with the prefix for the table names...you wordpress users know what I am talking about) did not have any errant user accounts in the ??_users table...which suggests to me that the database itself was not hacked. It seems that BOT / Hacker had to do this through the WordPress API.

Any thoughts?

Seth

Feb 27 2010

How was my WordPress site hacked?

Hello,

For context please read over my previous question.

http://stackoverflow.com/questions/2329371/wordpress-website-is-automatically-redirecting-after-load

Thanks to all of you who helped and advised in that last question. The site is cleaned up now and I thought would offer a few clues I noticed during cleanup and was wondering if anyone might could offer some ideas as to HOW the site was hacked?

The bottom line is that the database had 2 admin users that I had never added or made into admins. (Of course they can add themselves though registration but should not have been admins.) These users did NOT have email addresses entered which should not be possible.

The other wordpress sites that are using this same database (with the prefix for the table names...you wordpress users know what I am talking about) did not have any errant user accounts in the ??_users table...which suggests to me that the database itself was not hacked. It seems that BOT / Hacker had to do this through the WordPress API.

Any thoughts?

Seth

Feb 24 2010

New HiTech US Embassy in London

Currently Browsing: http://is.gd/96Cya
Feb 24 2010

How to add a user to your local groups on Windows

If you ever need to add a user to a local group on your Windows PC here is a way to do it. Open and Administrator Commnd Prompt Type net localgroup <groupname> <username> /ADD Example - NET LOCALGROUP administrators sethspearman /ADD Hope this helps someone. I just used this to add a user as a local admin on a Windows XP since I could not figure out a way to run the Local User and Groups applet using Run As. Seth
Feb 24 2010

WordPress website is automatically redirecting after load [closed]

I asked the following question on SuperUser.com and the question was closed. Maybe it should be asked on ServerFault.com. Not sure.

But here it is on SO hoping it will get some traction.

Hello,

I have a wordpress website. It is NOT a wordpress.com website. This website is hosted at godaddy.com This weekend whenever I fired up my browser and loaded the landing (or any other page) there it would load (firefox would say "Done") and then after a 1 second pause the browser would redirect to some seemingly random website.

Unfortunately (or fortunately?) this is an intermittent problem.

I use difficult to break passwords for my wordpress admin.

Any ideas on how to troubleshoot or what the problem is?

Seth

EDIT
Yes, the url is http://www.meeting-minutes.org. For the record, the reason I did not include the url when I reposted my question here is because I thought that someone might think that I am just trying to promote the software that I reference on the website. That is genuinely not my purpose.

EDIT Thanks for the help. I have taken the site down by simply renaming the hosting folder (so it now returns a 404 which is fine.) I will clean it up and redeploy after cleaning it up.

For the life of me I don't know how this could have happened.

Seth

Feb 24 2010

WordPress website is automatically redirecting after load [closed]

I asked the following question on SuperUser.com and the question was closed. Maybe it should be asked on ServerFault.com. Not sure.

But here it is on SO hoping it will get some traction.

Hello,

I have a wordpress website. It is NOT a wordpress.com website. This website is hosted at godaddy.com This weekend whenever I fired up my browser and loaded the landing (or any other page) there it would load (firefox would say "Done") and then after a 1 second pause the browser would redirect to some seemingly random website.

Unfortunately (or fortunately?) this is an intermittent problem.

I use difficult to break passwords for my wordpress admin.

Any ideas on how to troubleshoot or what the problem is?

Seth

EDIT
Yes, the url is http://www.meeting-minutes.org. For the record, the reason I did not include the url when I reposted my question here is because I thought that someone might think that I am just trying to promote the software that I reference on the website. That is genuinely not my purpose.

EDIT Thanks for the help. I have taken the site down by simply renaming the hosting folder (so it now returns a 404 which is fine.) I will clean it up and redeploy after cleaning it up.

For the life of me I don't know how this could have happened.

Seth

Feb 18 2010

When dropping a constraint will the supporting indexes also be dropped?

Hello,

I am trying to memorize some sql syntax and I have gotten the ALTER TABLE ADD CONSTRAINT syntax down. I believe I am correct when I say that when you use this syntax to add a FOREIGN KEY or PRIMARY KEY constraint, that sql server automatically creates indexes to support the constraint operations. (Is that true...or is it only true on the PK but not the FK?)

If so, when you use the ALTER TABLE DROP CONSTRAINT syntax...are the supporting indexes automatically dropped as well? Can these implicit supporting indexes be explicitly dropped? If so is the CONSTRAINT automatically removed?

I am just wanting to know how it works "under the covers". Googling has not helped. I imagine I could have queried some sys tables to discover the truth but thought I would try here instead.

Thanks for your help.

Seth

Feb 10 2010

Help for .NET Framework Install / Uninstall issues.

I just spent some time trying to resolve setup issues for a software product I support. SQL Server would not install.  Logs revealed error 1304 (error description is a red-herring) which I surmised was actually a .NET framework issue.  Uninstall of .NET 2 went fine but install of .NET 3.5 SP1 bombed. Found a .NET Cleanup tool here... http://blogs.msdn.com/astebner/pages/8904493.aspx This completely removed all remnants of .NET framework from the system.  Then the .NET 3.5 SP1 install succeeded. Then SQL Express setup succeeded as did our software setup. I was guided along the way by this excellent post. http://blogs.msdn.com/astebner/archive/2008/03/07/8108332.aspx Thanks Aaron Stebner...whoever you are. Hope this helps someone else. Seth
Feb 08 2010

SQL Server PIVOT syntax

Here is the Sql Server PIVOT syntax
-----------------------------------------------
SELECT virtual_columns_list-actual_data_values-EXAMPLE
     data1_value as col1_name,
     data2_value as col2_name
FROM
    (source_select_statement-columns) ps
    PIVOT
    (
        SUM (field_to_aggregate)
        FOR field_to_pivot IN
        (
              actual_data_values-EXAMPLE
              data1_value,
              data2_value
        )
    ) AS pvt
Feb 03 2010

Saw Wicked last night at the P…

Saw Wicked last night at the Peace Center. AMAZING. See it if you can.