I’m back online. Did you miss me?
Here’s the story:
Yesterday a user “jos” registered on my site with the email “john@chetkoe.tv”. That’s strange, I didn’t recall asking for people to register. So after checking to make sure it wasn’t somebody trying to subscribe by RSS or something, I deleted the user and changed my WordPress password.
When I got back home I started a backup of my entire site so I could upgrade to WordPress 2.9.2. DH wanted to go out to eat, so I left the backup running and went out. After all, not cooking dinner is a good thing, especially when you have a hacker to deal with.
Got home, got my backup, but couldn’t get into my dashboard with my new password. I still had access to my cPanel though, so I upgraded to 2.9.2 and then temporarily took my blog down.
Finally got another password and got back into my dashboard, where I promptly changed the registration settings, checked to make sure my files were clean, and here I am!
Lesson learned.
Here’s the moral of the story: If you’re still running an older version of WordPress this could happen to you. RUN, do not walk to the nearest computer and upgrade immediately (after backing up your site of course). Do not pass Go, and do not stop at the Old Spaghetti Factory, as delicious as that might be. (Feel free to go celebrate after you’re finished! Fighting hackers can be hungry work after all.)
Also in your dashboard, go to “Settings” in the menu on the left and click on “General”. If the “Anyone can register” box under “Membership” is checked then uncheck it. This is one way hackers can get in and if given enough time might even be able to set themselves up as an administrator. Then they will be able to do quite a bit of damage to your site, make you look like a spammer, etc. I’m not sure if this hack still works on 2.9.2 but it’s better to be safe than sorry.
Luckily I was right there when it happened so I was able to catch it in time and prevent any permanent damage (except for the inconvenience of having to fix this whole mess instead of making art). You can be sure that in the future I am going to make regular backups of my site, as well as upgrade my WordPress as soon as the upgrades are out of beta.
Happy Quilting!