Spamming and Wordpress
-
Hi,
I have a Wordpress site for which I was ranking #1 for my main key phrase. Then I noticed that my site had plummeted in ranking. Investigating I found the cause to be a hacking issue where my code has lots of content for and backlinks to Viagra sites! How do I best work on retrieving my ranking and making sure that the site in question gets penalized?
-
thanks, Paul.
I am testing the "Wordfence" plug-in, and I was able to identify (and delete) a malware file. I should probably look for a more secure host as well.
Cheers
Bo
-
This plugin is really helpful for protecting your site:
Once you clean up, it should gain rankings back.
-
A good idea would be to change your passwords on a monthly basis and maybe ask your hosting company to see if there is anything they can do to stop your site from being hacked. Also ask them if they have any data on when your site was hacked.
A good hosting company will help you keep your site secure
-
Just a heads-up Bo - and really sorry to be a bearer of bad news, but fixing a WordPress hack like you're describing is almost never as easy as just deleting the code you see in headers. Like on virus-infected desktop computers, the malware often hides an additional payload of crapware that is capable of regenerating the spam links after a designated time period.
There are a number of different WordPress scanning services like http://sucuri.net/, as well as security-scanning plugins available. Be sure to use a couple of them (no one tool catches everything) to make sure you site is actually clean. In addition, monitor it carefully and repeatedly for the next several weeks to make sure the malware doesn't surreptitiously re-assert itself.
Lastly, make certain you have changed all ftp passwords for your site's server and that you are using strong, complex passwords. This is an easy vector of attack that many webmasters forget to secure. If possible, you should be using sFTP (secure ftp) for any work on your site as it encrypts ftp passwords where regular ftp sends them in the clear and so is extremely easy to hack.
Paul
-
Hi,
thanks for sharing! I found the code in the Header and deleted everything, so hopefully that should take care of the "clean-up" process, so I can start on the "small matter" of regaining my ranking. I'm in 50th at the moment, so at least I'm indexed!
cheers
-
Hey Bo, just thought I'd chime in here. I had a client's site get some kind of nasty code injection - pharma stuff like you're talking about. Happened a month or so ago. He was #1 for his keyphrase also, but as soon as the site was compromised, he dropped to page 4-5. Soon as I re-did the site and got it live his rankings came back.
Sooo...bad news and good news. I highly doubt your site is actually de-indexed (good news). The bad news is the amount of work you'll have to do. I completely wiped the root folder, deleted the DB, and re-built the wordpress site from scratch on a different theme/framework.
-
hi, thanks for the advice!
I will check Webmaster tools, and send a description of the issue. I´m sure you´re right regarding the penalty issue, I guess I just have to tighten security...
-
Most usually, your rankings will come back once you clean your site up. I'd recommend letting go of thoughts regarding penalties to site in question. There's really nothing that the ordinary mortal can do that will make that happen and if there was something that could be done, they'd be up and running the next hour with another site (which probably already is up and running.)
The big take away is: keep your wordpress up to date, delete your admin account, and set up an account with another username with a strong password.
-
Is your site listed in google wmt? if so is there any messages.
Ask for re-consideration and explain what happened
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Site was infected with spam webmaster tools still reporting it
I have recently been working with a site that was hacked. It suffered from a pharma injection into Joomla. The site has been cleaned for several months, but WMT is still reporting "pharmacy" as occuring 421 times. The url it gives reports a 500 error. I also removed it in Google. Can this still be hurting the site? How can I clean this up?
Technical SEO | | smcmark0 -
Best practice for Landing page in Wordpress
Hi Mozers, has anyone experience in setting up landing pages with Wordpress? The problem I want to solve is the following: I work with a membership area like SEOmoz in which I have some bigger plugins running. If i make a landing page in the same installation like a custom post type/template or via another plugin like "Premise" all plugins will automatically load as well. That will harm my page loading time. Do you think, I should work maybe with Wordpress Multisites? Landing pages as a separate blog and the membership area as another blog? Appreciate any good idea! Thanks
Technical SEO | | reisefm0 -
'No Follow' and 'Do Follow' links when using WordPress plugins
Hi all I hope someone can help me out with the following question in regards to 'no follow' and 'do follow' links in combination with WordPress plugins. Some plugins that deal with links i.e. link masking or SEO plugins do give you the option to 'not follow' links. Can someone speak from experience that this does actually work?? It's really quite stupid, but only occurred to me that when using the FireFox add on 'NoDoFollow' as well as looking at the SEOmoz link profile of course, 95% of my links are actually marked as FOLLOW, while the opposite should be the case. For example I mark about 90% of outgoing links as no follow within a link masking plugin. Well, why would WordPress plugins give you the option to mark links as no follow in the first place when they do in fact appear as follow for search engines and SEOmoz? Is this a WordPress thing or whatnot? Maybe they are in fact no follow, and the information supplied by SEO tools comes from the basic HTML structure analysis. I don't know... This really got me worried. Hope someone can shed a light. All the best and many thanks for your answers!
Technical SEO | | Hermski0 -
Wordpress site, combine Blog without hurting SEO - Need Expert Advice
Hi, I come from the old html days of Frontpage and then moved to Dreamweaver. I first worked with Wordpress at version 2.7 and was not all that impressed, but then recently I worked in the new version and was extremely impressed. So my knowledge of Wordpress is VERY limited and plan to build future sites with it. I need to know the best way to solve an issue for a customer. The client is http://www.nextgenrestoration.com/ Site was built years ago with Frontpage. The popularity of Blogs was hot so someone told them that if they add new content it would be better to use a blog, so they added a blog. So you have the following: www.nextgenrestoration.com (main site) then they installed wordpress in a folder (blog) www.nextgenrestoration.com/blog Original person that built the site quit. New person took over and said the main site needed to changed to Wordpress because they did not have Frontpage and all they knew was Wordpress. Main site was converted to Wordpress. They wanted to keep the original design so they did not use a stock template, they just built it with their design. I guess from looking at the Editor, they manually went in and put the design in to match. Now.. this last month, the person that had changed
Technical SEO | | Force7
the site to Wordpress quit. So I got involved because the new person they hired could not add content to the main website. If you add a page, it does not show up, you have to manually go in the php and add the link to the category. The new person knows how to use Wordpress but she knows nothing about PHP so is lost when it comes to manually adding content to the site. Here was my Thoughts. The main site needs to be rebuilt in a stock template so it automatically creates new pages, blog posts. I have to make sure that if we change the
main website that we could keep all the same links and page names. The girl
that built the site, if you hover over the links that she put it under ‘florida’,
that must be a category. But we would need to keep the same page names. I know
we could do a 301 redirect but this guy cannot lose traffic. He is already down
in hits after the last Panda update. My thought was, rebuild the main site in a stock template so
someone can actually add content easily to the site. Also build a new blog
section so it all matches. (personally the existing design looks old and dated and needs updating) If you look at the site now. The blog looks totally
different and it is not helping if a customer comes to the blog but cannot see
the navigation for the whole site. My thought was to just leave the old blog, it has a LOT of backlinks. But just add a new blog to the main site and all new content goes there. The old blog would stay just make sure we did build in some call to action so it sends them to the main site. Also, we found we cannot create a Blog on the
wordpress we have installed in the main directory. I am guessing because it
wants to name it /blog? I want to be sure we give this client the best advice on what to do without
hurting his existing seo and traffic. As you can tell, I am not qualified to really give the best advice since I am so new to Wordpress. This is a small company that really needs some help. Thanks in advance for your time! Force70 -
Title Tag Wordpress
I need to know how can I personalize the title tag individually in my categories?
Technical SEO | | nafera20 -
How to Redirect all inactive Feed to a specific Wordpress page
Hi Guys, I've been doing much cleaning on my blog lately and deleted numerous categories including their posts with low quality content. After deleting the categories, Google Webmaster Tools is reporting some 404 errors about the RSS Feeds for the deleted categories. I've created a 404.php file inside my theme and placed the following code header("HTTP/1.1 301 Moved Permanently");
Technical SEO | | Trigun
header("Location: http://www.mysite.com/My404Page/", true, 301);
exit();
?> this have catched all 404 errors and redirected them to the specific page. Unfortunately, it could not catch the inactive feed urls. Is there a way to do this so that all inactive feeds will be redirected to my 404 page? Thanks in advance....0 -
Sitefinity vs Wordpress
We're looking for a new CMS and out development company suggested Sitefinity. I've had great success with Wordpress. Is either system better. I love worpdress but have had no experience with Sitefinity. Thanks!
Technical SEO | | StandUpCubicles0