Tag Info

New answers tagged

1

I think your plugin scure-bank has backdoor for hackers and they found it easy to hack the site. I would recommend you following things that you should do now: Take backup of your database if you did not do this already. Take backup of all files of your site. It means all files, plugin files and everything. Delete now all files from server as you have ...


0

I'm looking at the URL tail alone... /wp-content/plugins/scure-bank/fea7b6cabec2fd724dd2d1b4ca7e898d/thankyou.php and it seems that banking scripts were probably installed in the scure-bank folder. ClosetNoc has good suggestions, but first I'd suggest downloading any content you believe is good from the server to your computer to keep as backup so that ...


5

Wordpress is the single most hacked software on the planet and has been for a long time. It is not that the Wordpress programmers are doing poor work, quite the opposite. With so many plug-ins and themes, Wordpress, even with vulnerabilities within it's own code in the past, remains the most vulnerable software available. It becomes imperative that all ...


0

SMS Verification is a good idea, users have to be pretty committed to get duplicate phone numbers, bonus of giving you a database of your customers phone numbers for marketing purposes or following up after a period of time. There's various ways to do this depending on how you're constructing the website, which CMS, etc. One example in wordpress you could ...


0

This is almost certainly injected into pages on your own machine. Various malware, once installed, adds itself to loaded pages in order to affect the functioning of the page (generally by replacing ads with its own ads so the authors can collect the click revenue). See this question for more info. To test, check the actual server files, or use cURL or a ...


2

I think the more you require in an account, the more difficult it is for one to reproduce it. By that, I mean you may want to require one's email address AND text messaging number and ask the user to confirm both pieces of information. For the texting option, an easy way is to send a message less than 140 characters to a special MMS email address. Usually ...


2

Been dealing with this problem since 2001. No good way. Only option is to use Oauth 2.0 external authentications from Google/facebook/paypal and trust them to weed out duplicates.


2

If I write ftp://myhostname, the browser asks for FTP username and password and I think this may be a security problem because it doesn't happen with other websites like ftp://google.com. It can happen with numerous other URLs. What you discovered is that a server has FTP software installed and setup properly so that it allows no anonymous user access. ...



Top 50 recent answers are included