Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Go ahead, laugh. I forgot to remove the default admin/admin account on my blog. SOmebody got in and has replaced my homepage with some internet graffiti. I've used .htaccess to replace the page with a 403 error, but no matter what I do, my wordpress homepage is this hacker thing.

How can I setup my server so that ONLY MYSELF can view it while I'm fixing this via .htaccess? What steps should I take to eradicate them from my server? If I delete the ENTIRE website and change all the passwords, is he completely gone?

Thanks.

share|improve this question
    
It depends very much on how much access the hacker got. If he only has access to the admin interface of wordpress, then you could simply put in a password using .htaccess. This way others can't see the page while you can, and AFIAk you can redirect failed authentication attempts to the 403 page. If he got access to a shell somehow, in other words he would have some way to remove or otherwise circumvent the .htaccess then really, you probably have to look at cleaning out the entire server (fresh install or revert to backups if you have them). –  sirlark Jun 23 '11 at 0:30
    
Question for Webmasters? –  Cupcake Jun 23 '11 at 0:39
    
And crickets chirp. sigh –  Omnifarious Jun 23 '11 at 2:04
add comment

migrated from stackoverflow.com Jun 23 '11 at 0:41

This question came from our site for professional and enthusiast programmers.

1 Answer

up vote 2 down vote accepted

How can I setup my server so that ONLY MYSELF can view it while I'm fixing this via .htaccess?

Use basic authentication to block the site from everyone who doesn't have the login and password (i.e. anyone who is not you).

What steps should I take to eradicate them from my server? If I delete the ENTIRE website and change all the passwords, is he completely gone?

If you completely uninstall the software, delete everything associated with it (e.g. directories) and re-install it from scratch you should be fine.

share|improve this answer
1  
Thanks tons, there's some reputation for you! click –  Jackson Gariety Jun 24 '11 at 1:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.