{"id":955,"date":"2013-05-11T16:52:17","date_gmt":"2013-05-11T16:52:17","guid":{"rendered":"http:\/\/www.marfell.me.uk\/wordpress\/?p=955"},"modified":"2013-05-12T16:58:54","modified_gmt":"2013-05-12T16:58:54","slug":"passwords-and-annoying-hackers","status":"publish","type":"post","link":"https:\/\/www.marfell.me.uk\/wordpress\/passwords-and-annoying-hackers\/","title":{"rendered":"Passwords and annoying hackers"},"content":{"rendered":"

I have just been through my various passwords and tightened them all up. I have also removed “admin” accounts from my sites. Something that was long overdue and was annoyingly exploited by a hacker.<\/p>\n

Doing this tidying up did not take long, it took me a bit longer to find out what had been done to my WordPress sites – this one and Friends of Baildon Moor<\/a>. When using the Twenty Twelve template the main page just displayed a “Hacked” message yet when I looked at the page source code everything looked normal. Firebug, or the tools in Chrome, showed just the hack message as the page. This at first didn’t make sense but I now realise that the hack was creating a new document.<\/p>\n

I assumed that the hack was in the php or css files for the template and used WinMerge to look for differences. I have a cron job that sends me a list of files with a modified date\/time within the last day, nothing was in the list so I assumed the hacker had been clever with the dates on the files.<\/p>\n","protected":false},"excerpt":{"rendered":"

I have just been through my various passwords and tightened them all up. I have also removed “admin” accounts from my sites. Something that was long overdue and was annoyingly exploited by a hacker. Doing this tidying up did not take long, it took me a bit longer to find out what had been done […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4],"tags":[],"class_list":["post-955","post","type-post","status-publish","format-standard","hentry","category-paul"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p3kGoX-fp","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/posts\/955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/comments?post=955"}],"version-history":[{"count":8,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/posts\/955\/revisions"}],"predecessor-version":[{"id":962,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/posts\/955\/revisions\/962"}],"wp:attachment":[{"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/media?parent=955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/categories?post=955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.marfell.me.uk\/wordpress\/wp-json\/wp\/v2\/tags?post=955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}