Comments on: Blacklisted

By: The Graphyte

The Graphyte — Sun, 04 Oct 2009 19:40:44 +0000

Thanks for the positive feedback guys, as an additional note one of the best methods of insuring that this iframe doesn't show up on your site is by having a rock hard password for your server login. Its a pain in the ass to create something you can barely remember without referring to it on a piece of paper but this will almost insure that your site cannot be accessed. Make sure you use a lot of numbers, symbols, Upper case and lower case for your password. Best line of defensive is protecting your hosting account so no one can access your site through FTP.

By: Joe Dirt

Joe Dirt — Sun, 04 Oct 2009 19:29:39 +0000

Dude, this is a great post, definitely helpful. I'm not a web designer by any means but I've been using WordPress for a few years now and always thought it was too much of pain in the ass to upgrade but I started hearing about the weaknesses within wordpress and had no choice. Thank god they made it easier to upgrade so this kinda stuff doesn't mess up all your hard work. Very interesting though, I'be sure to follow your RSS feed.

By: Xavier

Xavier — Sun, 04 Oct 2009 05:01:41 +0000

i havent had the chance to read this but you know i am trying to put up a site soon so i will be reading this intently since it i will probably save me a lot of future hassle. thanks ahead of time!

By: David

David — Thu, 01 Oct 2009 18:15:57 +0000

Great post Graphyte, I just googled this problem and it linked me to this post. This is great stuff and definitely helpful, especially when your not a strong coder as Paul puts it. The same thing is happening to me and I didn't know what to do. At least I can scan my files through "no virus thanks" and find the bad iframes. Thanks for putting this on your site, which by the way has a great layout and gorgeous design element. I will post back here once I clean my site.

By: Paul

Paul — Thu, 01 Oct 2009 02:25:02 +0000

This isn't the first time I've heard about this kinda stuff, unfortunately I had to remove my WordPress account off the server in order to be sure it didn't happen again. I'm not the most strongest coder at all but your tips definitely help, and already looking into getting some security plugins to prevent this attack again. Thanks for posting this, definitely helps.