Dealing with Trojan attacks via mysql and wordpress

My poor baby is sick again. Last month BloggerLUV went live with a blog and quickly added a still safe community and just as I had the design slightly PIMPING and the site was kicking ass on Alexa it was infected with some crazy powerful trojans.

What this did basically was rewrote the index.php files and had some javascript ENGINE pumping itself back EVERYWHERE, most times when you have some code problem you can switch the theme, if you have a real problem you can rename any theme or plugin in attempt to turn the LIGHTS off and go back to the defaults. So anyway it was very frustrating to not just edit a quick file/s and be on my way. One of the many reasons THIS BLOG is backed up and stored in many places  and I can easily just rewrite and upload any file is because I did all the right things in the beginning and VERY RARELY add any plugins or themes to this site now.

One interesting note is like a week before the attack I was on the site with a little netbook and thought I was SLICK adding some offbeat underground HACK plugins for a FREE directory etc you know trying to add and have something most blogs don’t. Well that effort cost me and I thought I removed the crap on the netbook until the screen went permenantly BLACK NICE

So Kristi was helpful in suggesting I run that Krapesky free for 30 days app and since I never download stuff I THINK isn’t safe I wasn’t to much worried about OUTSIDE threats.

When you DEMO a plugin it adds BLOCKS to your database, so when you install it its DONE when you uninstall or delete it’s STILL DONE

I could make a plugin that you loved make it some do follow thingy and it actually sends me your password and maybe if I’m feeling really spicy I could have to alter your Google PUB ID to mine But since I NEVER do stuff like that let’s move on .

How worried are you about your blog ? As a group blog BLOGGER LUV I’m pretty worried. I asked a few of my close blogging friends to join US on this project and I can’t even manage a wordpress install ? Makes you question your programming aptitude for sure.

Speaking of wordpress I constantly LOOK for something BETTER yes WP is pimping and FREE but it makes way to many database calls for me So actually the limits of wordpress have inspired me to study Ruby on Rails, the programming language that built Twitter and many awesome sites and applications. Anyway why cry over spilled milk hey I’m learning more about databases and all that so have any cool tricks and tips to keep your site safe ? Be careful what you download as if we didn’t hear that before. Also I hope your database password isn’t the same as your blogs, emails password because I can see your database password

Peace out and thanks for stopping by

Please feel free to take a REAL PEEK at http://bloggerluv.com code and let me know what you think I went back to the default theme for now Thanks   If you see anything pls let me know see I went MANY times deleting that script crap and damn that fucker is good and the reincarnating script returns Hey if it was easy it wouldn’t be BLOGGING Check YO self FEWL <<just wanted to say that sorry LOL

Tagged as: Alexa Internet, Blog, google, Programming language, Ruby, Ruby on Rails, Twitter, wordpress