[Klug-general] wanted: db advice/crashcourse for helping clean cracked wp site

[David Halliday]

If the site has been compromised the only way to be sure nothing is left is
to remove all code etc...
I'd backup data and reinstall wp.
On Feb 23, 2012 8:57 PM, "James Morris" <jwm.art.net at gmail.com> wrote:

> Hi,
>
> I've offered to help clean up a word press site which has been
> targetted by the pharmacy style hacks. Something like this:
>
> http://redleg-redleg.blogspot.com/2011/02/pharmacy-hack.html
>
> I've got ssh access and have been removing instances of base64
> obfuscated code from various files in the site. I think I've tracked
> it all down but am worried about how it got there (though suspect use
> of ftp is to blame).
>
> Anyway, I need a bit of a crash course in mysql (i presume that's
> what's used) as I want to make sure the database is clean... Can
> anyone give advice or examples of queries that will help in this task?
>
> thanks,
> James.
>
> _______________________________________________
> Kent mailing list
> Kent at mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/kent
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/kent/attachments/20120223/52844e5d/attachment.htm>