Blogging | Forum « Alert: Timbthumb image resize, you can be hacked! « Social Media Examiner

Alert: Timbthumb image resize, you can be hacked! (6 posts)

Jason Wiser said
1 year, 3 months ago:
Though this is an older issue, Aug 2011, there are still a surprising number of Wordpress users that are not aware of this. If you were unaware, now your not. Protect yourself. http://wordpress.org/extend/plugins/timthumb-vulnerability-scanner/
@jasonwiser | # | Top
Kristi Hines said
1 year, 3 months ago:
@jasonwiser One of my sites got hit by this one. Unlike most of the other WordPress hacks, this one affects all of the JavaScript files instead of the PHP files.
Key thing to do if it gets you – look at your wp-config.php file. You think it looks normal, but scroll past where it should end and you’ll find some code that allows the hacker back into your site later, even if you’ve cleaned all the JavaScript files up. :(
@kristi-hines | # | Top
Thomas Flügge said
1 year, 3 months ago:
@jasonwiser Thank you indeed for that link. Alike @kristi-hines one of the sites I manage got infected. There have been some plugins available, but this one looks pretty good. BackupBuddy, Sucuri or the Akeeba AdminTools also provide good routines.
@ecumenix | # | Top
Martyn McDermott – Creative Director said
1 year, 3 months ago:
We got hit by this one too unfortunately. We have experienced attacks through other wordpress vulnerabilities too. So one of my colleagues wrote a blog about the plugins and techniques he used to lock down our sites. Its pretty comprehensive and I hope there’s some useful information in there for you.http://hm-marketing.com/Blog/February-2012/Securing-Your-WordPress-Installation
@hmmarketing | # | Top
Jason Wiser said
1 year, 3 months ago:
@hmmarketing great article! Thanks for posting. Some really good reminders here.
@jasonwiser | # | Top
Martyn McDermott – Creative Director said
1 year, 3 months ago:
@jasonwiser thanks, now I just need to get on top of our site functionality, SEO and social marketing so more people know it exists!!
@hmmarketing | # | Top

Add your voice to the discussion

Existing members: login here. If you do not have a SME account, sign up for one now.

Sign Up / via