Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

My wordpress blog has been hacked. Any page that I got to it shows the page html that hacker put in some where. I am not wordpress expert but it looks like hacker put the code somewhere (in database or file system). Can someone point out where should I look at to remove that hacker code?

share|improve this question
1  
1  
Wipe the filesystem, and upload a clean version, or restore from your backup. Then apply patches. See: serverfault.com/questions/218005/… –  Zoredache Apr 2 '13 at 18:10
    
Wordpress blogs are just that, blogs, not entire servers. –  kmarsh Apr 2 '13 at 20:46
add comment

marked as duplicate by Michael Hampton, Zoredache, Stefan Lasiewski, MadHatter, mfinni Apr 2 '13 at 18:33

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer

Best place to start is with docs and resources from WordPress itself.

Work your way through these resources and follow all instructions to completely clean your site or you may be hacked again. See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex.

Change all passwords. Scan your own PC. Use http://sitecheck.sucuri.net/ before and after.

Tell your web host you got hacked; and consider changing to a more secure host: Recommended WordPress Web Hosting

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.