Hacked by a Lunatic
Filed Under Technology
Just recently, this blog is down for almost a day because of a lunatic wanting to catch attention. He’s a Turkish script-kiddy that hacked this site.
So for you, here’s the attention you have been longing for. Some people may not want me to display this but hey, he want some attention so here’s some. Eat it, until you’re dead! May you rest in peace… in hell together with Satan!
For all others who reads this post and have their own blog/site, I recommend that you take the following steps to limit(note, just limit and not eradicate) the chance that your site is hacked.
1. Make sure that you change/set the chmod of your wp_config.php (wordpress) and configuration.php(joomla) to 644. Do this on other settings file that your script uses. I won’t tell you how but in case you don’t know, use your ftp client to do this.
2. Unless necessary (i.e, cache folders), set the chmod of your folders to 755 or 644 if you can. This is to prevent the hackers from placing files
3. Provide a blank index.php or index.html in every folder that you have. This is to prevent the script kiddies from viewing the contents of the folders.
4. Change your passwords(database and ftp) since script kiddies may already extracted them when they broke-in to your site.
5. Always backup your files and databases.
For those that are also hacked by the same lunatic, here’s you’ve got to do.
Joomla
It is only the configuration.php that was replaced. The script kiddy replaced it with html that points to his site. You’ll be glad if you have a copy of it from your backup. If you don’t have enough luck, download the configuration.php-dist and supply the correct settings and save it as your configuration.php
The other option is to reinstall Joomla into another db. After installation, point the database configuration.php to your old db. This is easier for some people especially if there’s no plugins installed but I still recommend to just recreate the file. However, having a backup is always the best and easiest way to put your site back online.
WordPress
Grab a copy of your wp-config.php and reupload it. If you don’t have a copy, get the file from the installation package and then update the files with the correct settings.
Just like with Joomla, you can also do a reinstall if everything fails. Just don’t drop your old database, though.
So, that’s just it for now and I hope you learn something on this experience.