On 12/25/11 9:28 PM, Sivakatirswami wrote:
We have hackers on our web server getting in thru one Domain... I think
there is a whole in WordPress.
My hosting provider, JaguarPC, just released this notice four days ago.
Sounds like a similar thing.
****
Wordpress Security Advisory
We are currently seeing a high number of Wordpress installations
being hacked due to out of date scripts, plugins, and themes. The folks
at Wordpress are very good about releasing fixes whenever they hear
about a new exploit. Please take some time to check your installations
and update everything noted in your WP admin panel under Updates
including anything installed such as a theme or plugin that is not
currently being used. Consider removing unused items for better security.
Wordpress 3.3 was just released as well as updates for their 2
default themes.
Now is also a good time to harden the security of your blogs. There
are lots of things you can do to protect your blogs from hacking.
WPsecure has tips and info on recent exploits. See also Hardening
WordPress « WordPress Codex . Many more tips are available by using
search engines to search for "securing wordpress". A little time spent
now on this can prevent huge headaches and downtime in the future.
There are numerous security plugins you can install such as Login
Lockdown, WP Security Scan, and Mute Screamer. I highly recommend them.
Before making any changes, be sure to make a full backup of your
account in your control panel under Backups. Wordpress users should also
be doing routine database backups either with a cron job or a plugin
named WordPress Database Backup. The database is the heart and soul of
any blog. Scripts can easily be reinstalled but not lost data without
current backups.
<http://www.jaguarpc.com/forums/news-announcements/27056-wordpress-security-advisory.html>
--
Jacqueline Landman Gay | jac...@hyperactivesw.com
HyperActive Software | http://www.hyperactivesw.com
_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
