Malware & Wordpress
-
Google has identified Malware on on eof our Wordpress sites. In webmaster tools it names the 10 pages where code has been injected.
I cant' find them easily via the WP dashboard and wondered if anyone had had any experience of this and what steps they took?
Plus are there any measure I can take to fight against this? The site is on the latest WP version.
Thanks,
Colin
-
Thanks Majid,
Sucuri Scanner looks good. I wonder if you had any experience of it?
If it can remove the malware as well as alerting me of any future hacks it would seem money well-spent.
Colin
-
Thanks Marie (and Dan and Majid),
I am going through the plugins and widgets now. I re-installed a clean version of the Theme too but not sure if I've done that too soon if the script is still there.
I can see the page titles in Webmaster Tools but cant' find the actual pages on the server to delete, in case that helps.
I will definitely look at the security suggestions and resources suggested. Thanks for the tips.
Marie I will PM you too if I may.
Thanks guys,
Colin
-
That would be ok if you use these plugin as well :
http://wordpress.org/extend/plugins/sucuri-scanner/
-
Colin
Any luck with this yet? I'd follow Marie's good advise and first be sure everything is updated. Then try these things to find it;
- Disable each plugin one by one and see if it goes away.
- Can you see the code when you view source or use a tools like browseo.net or shut off CSS? If you can see the location of the injected code you may be able to tell where it was inserted.
- If you can't see it viewing source or with browseo etc - try doing a Google cache: search and view in text only.
- Check your widgets.
- Check your .htaccess file
Once you find it definitely check out this document on securing wordpress.
Let us know how it goes.
-Dan
-
Definitely keep your plugins updated. Plus, if you use Timthumb on any of your sites, do some research on Timthumb vulnerabilities.
Make sure you change all of your wordpress passwords after cleaning up.
And, if you get hit again, despite your cleanup, hire a professional! I had a nasty job done on one of my sites. My host thought they'd fixed it and it came back. I hired sucuri.net to fix it and after 3 weeks they were no further ahead. I hired a professional guy (pm me for the name if you want to hire him) and it took him a while but he figured it out. Not all malware issues are that complicated though.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Changing Ecommerce Site Display style will it impact on seo & performance?
Hello Expert, Do redesign website will affect seo? At initial level drop in visitor, pageviews? Actually I am redesign my ecommerce site but we are not changing 1) url's 2) we are not changing content 3) we are not changing server 4) we are not changing navigation. We are changing display style at homepage, category page, subcategory page, product page, checkout step. So still it will impact on website visitors & pageviews? 2) How google will react on int 3) How visitor will react? Thanks!
Technical SEO | | Johny123450 -
Wordpress rel next & previous for SEO
Hi, I have implemented this function into my wordpress theme. However, I can only get the prev rel to show up. Does anyone have an idea? function rel_next_prev(){
Technical SEO | | SEOhughesm
global $paged; if ( get_previous_posts_link() ) { ?>
} if ( get_next_posts_link() ) { ?>
} }
add_action( 'wp_head', 'rel_next_prev' );
?>0 -
Guys & Gals anyone know if urllist.txt is still used?
I'm using a tool which generates urllist.txt and looking on the SEO Forums it seems that Yahoo used to use this. What I'd like to know is is it still used anywhere and should we have it on the site?
Technical SEO | | danwebman0 -
Redirection plugin: wordpress vs apache module?
Hi, Any one familiar with the wordpress plugin 'redirection' Are there any SEO benefits of having the plugin write the 301 redirects into the .htaccess? The standard mode does not use .htaccess but has wordpress genertae the 301s Thanks
Technical SEO | | Justin10 -
Wordpress theme installation problem
Hi, I was trying to install different theme from wordpress - appearance - install theme As soon as I did that, I saw error message and can't even access to my wp-admin Can anyone help me with this problem? My site is http://www.inksellsanpedro.com I tried rename old theme - didn't help delete old theme - didn' help either Any help will be greatly appreciated. Thank you
Technical SEO | | BistosAmerica0 -
SEO Mox reporting all pages & titles as duplicate, but this is not the case.
HI, I am confused . This week SEOMoz is reporting that all my pages and pages titles are duplicate. This is not the case. I have added geo meta tags to each page - could this be causing the duplicate page content condition? I have no theory about the title duplicate condition. I have uploaded pdfs of these seomoz reports here: http://www.2shared.com/document/JAgS2Ni9/Issue_-Duplicate_Page_Content.html http://www.2shared.com/document/gyXcMsoP/Issue-Duplicate_Page_Title-.html Help please. thanks.
Technical SEO | | RichardB20 -
Adding .html To Wordpress Site
I am working on a team (my part is the SEO) where the developer added the .html extension to the permalinks. I don't understand why, on Wordpress, you would do this. Is there any benefit, or penalty for it as an SEO standpoint? I usually just set mine up %postname% as the permalink structure, but I am not the web design lead on this project. I asked the designer why, but he seems to be reluctant to answer any of my emails about his work, (like he is above that or something). Not wanting to make things worse, I dropped it and thought I would ask here since I saw a few posts in reference to it today in the forum. Is there an advantage or disadvantage (either way) to using the .html extension on a Wordpress site?
Technical SEO | | kbloemendaal0 -
EzineArticles WordPress Plugin
Any thoughts on the EzineArticles plugin for WordPress? I read that it provides "the ability to simultaneously publish new posts to the web and submit them as articles to EzineArticles.com" Could this lead to duplicate content penalties?
Technical SEO | | martyc0