Comments on: Blogs are more vulnerable to hacking than other websites! http://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/ A Blog to Help you Earn Money from Home via Blogging, SEO tips and Internet Marketing strategies Wed, 08 Feb 2012 17:56:54 +0000 hourly 1 http://wordpress.org/?v=3.1 By: Raminhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-10344 Ramin Mon, 31 Aug 2009 06:52:44 +0000 http://www.dollarshower.com/?p=467#comment-10344 yes, fortunately :-) I had to backup my WP blog, delete the old installation and reinstall WP new, import entries + upload files again. yes, fortunately :-) I had to backup my WP blog, delete the old installation and reinstall WP new, import entries + upload files again.

]]> By: Ajith Prasadhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-9317 Ajith Prasad Tue, 30 Jun 2009 14:07:28 +0000 http://www.dollarshower.com/?p=467#comment-9317 <strong>@Ramin</strong>, sorry to hear that...did you fix the problem yet? @Ramin, sorry to hear that…did you fix the problem yet?

]]> By: Raminhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8924 Ramin Sun, 21 Jun 2009 06:41:34 +0000 http://www.dollarshower.com/?p=467#comment-8924 I just figured out that my blog got hacked now, and I found your site searching for a solution. It's bad - for visitors, it shows a normal site, but only googlebot sees a different site, which is full of spammy viagra stuff. I am trying to fix this before it Google dumps my site because it thinks I am spam...<abbr><em><abbr><em>Ramin´s last blog post... <a href="http://www.dasdu.de/?p=242" rel="nofollow">Bei Durchfall Cola und Salzstange? Nein, stattdessen…</a></em></abbr></abbr></em> I just figured out that my blog got hacked now, and I found your site searching for a solution. It’s bad – for visitors, it shows a normal site, but only googlebot sees a different site, which is full of spammy viagra stuff. I am trying to fix this before it Google dumps my site because it thinks I am spam…

Ramin´s last blog post… Bei Durchfall Cola und Salzstange? Nein, stattdessen…

]]> By: Ajith Prasadhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8618 Ajith Prasad Sat, 13 Jun 2009 17:04:01 +0000 http://www.dollarshower.com/?p=467#comment-8618 <strong>@Anish</strong>, You are right about the plugins and widgets, you never know what kind of scripts they download at runtime.<strong>@Richael</strong>, any CMS system with default database admin entry scripts exposed in a standard form is vulnerable to SQL injection hacks. And the hosting companies those offer unlimitted hosting for three or four bucks need to be really analyzed well before singing up. I had some issues with Host Monster a couple of times but continuing till the next renewal.<strong>@Kim</strong>, thanks for sharing your experiences with grey matter. Although, WP is not all that secure yet, probably it's the best among the lot I believe. @Anish, You are right about the plugins and widgets, you never know what kind of scripts they download at runtime.

@Richael, any CMS system with default database admin entry scripts exposed in a standard form is vulnerable to SQL injection hacks. And the hosting companies those offer unlimitted hosting for three or four bucks need to be really analyzed well before singing up. I had some issues with Host Monster a couple of times but continuing till the next renewal.

@Kim, thanks for sharing your experiences with grey matter. Although, WP is not all that secure yet, probably it’s the best among the lot I believe.

]]> By: Kim Woodbridgehttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8586 Kim Woodbridge Fri, 12 Jun 2009 15:07:53 +0000 http://www.dollarshower.com/?p=467#comment-8586 I have never had a WordPress blog hacked but I had an old one hacked into, which actually got me kicked off of my webhost. It was a blogging platform called Greymatter. Quite a few people used it because it was one of the first that could be self-hosted but it ended up having numerous security holes. I don't think anyone used it anymore (I hope) and most webhosts ban it.<abbr><em><abbr><em>Kim Woodbridge´s last blog post... <a href="http://www.kimwoodbridge.com/wordpress-28-upgrade-issues-and-recommendations/" rel="nofollow">WordPress 2.8 Upgrade Issues and Recommendations</a></em></abbr></abbr></em> I have never had a WordPress blog hacked but I had an old one hacked into, which actually got me kicked off of my webhost. It was a blogging platform called Greymatter. Quite a few people used it because it was one of the first that could be self-hosted but it ended up having numerous security holes. I don’t think anyone used it anymore (I hope) and most webhosts ban it.

Kim Woodbridge´s last blog post… WordPress 2.8 Upgrade Issues and Recommendations

]]> By: Richael Neethttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8530 Richael Neet Thu, 11 Jun 2009 08:30:26 +0000 http://www.dollarshower.com/?p=467#comment-8530 Wordpress out of the box is very insecure. Release of version 2.8 speaks volumes as they have fixed close to 790 bugs... That is a huge number of loopholes, in my estimation.As you rightly mentioned, Ajith; the hosting company is also a determining factor as to how secure your blog may be. My recent experience is a testimony...I gave up hosting at Hostgator (because of the cost) and moved to a cheaper company. The next day after migration and propagation, my blog was hacked and the whole DB deleted. Luckily, I had the backup and restored it after switching hosts instantly.I have learnt my lesson since.<abbr><em><abbr><em>Richael Neet´s last blog post... <a href="http://feedproxy.google.com/~r/DomainMarvelous/~3/E6umiHp_7yY/" rel="nofollow">Can Domain Parking violate basic Copyrights?</a></em></abbr></abbr></em> WordPress out of the box is very insecure. Release of version 2.8 speaks volumes as they have fixed close to 790 bugs… That is a huge number of loopholes, in my estimation.

As you rightly mentioned, Ajith; the hosting company is also a determining factor as to how secure your blog may be. My recent experience is a testimony…I gave up hosting at Hostgator (because of the cost) and moved to a cheaper company. The next day after migration and propagation, my blog was hacked and the whole DB deleted. Luckily, I had the backup and restored it after switching hosts instantly.

I have learnt my lesson since.

Richael Neet´s last blog post… Can Domain Parking violate basic Copyrights?

]]> By: Anish K.Shttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8529 Anish K.S Thu, 11 Jun 2009 06:14:59 +0000 http://www.dollarshower.com/?p=467#comment-8529 Today morning I was shocked, my blog not getting, no problem for forum and main site, admin login also failed, then I read your post, then I uploaded WordPress 2.8 and deactivated all pluggin, Tweet This Plugin makes the problem, removed that folder, now ok :)<abbr><em><abbr><em>Anish K.S´s last blog post... <a href="http://www.dishtracking.com/blog/newsx/newsx-takes-you-at-stumps-at-the-t20-world-cup-brings-in-complete-t20-world-cup-coverage-with-farokh-engineer-live-from-england" rel="nofollow">NewsX takes you AT STUMPS at the T20 World Cup : Brings in complete T20 World Cup coverage with Farokh Engineer live from England</a></em></abbr></abbr></em> Today morning I was shocked, my blog not getting, no problem for forum and main site, admin login also failed, then I read your post, then I uploaded WordPress 2.8 and deactivated all pluggin, Tweet This Plugin makes the problem, removed that folder, now ok :)

Anish K.S´s last blog post… NewsX takes you AT STUMPS at the T20 World Cup : Brings in complete T20 World Cup coverage with Farokh Engineer live from England

]]> By: Ajith Prasadhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8519 Ajith Prasad Wed, 10 Jun 2009 17:50:32 +0000 http://www.dollarshower.com/?p=467#comment-8519 <strong>@Chetan</strong>, thanks for your post link. I shall give the wp-security-scan plugin a try.<strong>@Melvin</strong>, thanks for the spam :) You are right about folder permissions as mentioned in the post.<strong>@Lax</strong>, running daily backups is not a bad idea (depends a great deal on how often you post/change content, how many comments are received at what frequency etc)<strong>@George</strong>, that was a surprise for me as well. Even bigger surprise was the 5 hr downtime caused by Host Monster last month.<strong>@Jacques</strong>, backups definitely help though nobody wants to get to a point where you are forced to restore your backed up content - ie. a situation post hack or crash :)<strong>@Sandeep</strong>, I still really do not know if it was a hack, WP bug or some script error that occured after caching :)<strong>@Samrat</strong>, thanks buddy... @Chetan, thanks for your post link. I shall give the wp-security-scan plugin a try.

@Melvin, thanks for the spam :) You are right about folder permissions as mentioned in the post.

@Lax, running daily backups is not a bad idea (depends a great deal on how often you post/change content, how many comments are received at what frequency etc)

@George, that was a surprise for me as well. Even bigger surprise was the 5 hr downtime caused by Host Monster last month.

@Jacques, backups definitely help though nobody wants to get to a point where you are forced to restore your backed up content – ie. a situation post hack or crash :)

@Sandeep, I still really do not know if it was a hack, WP bug or some script error that occured after caching :)

@Samrat, thanks buddy…

]]> By: Kurt Avishhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8518 Kurt Avish Wed, 10 Jun 2009 17:45:44 +0000 http://www.dollarshower.com/?p=467#comment-8518 I normally do a backup each hour and is emailed to a dedicated email address (gmail is good).I also use a plugin to encrypt password send during login... just in case sm smart guy is looking through his e-bino lol.3rdly I think I can trust my current host as they backup the whole directory regularly each day.<abbr><em><abbr><em>Kurt Avish´s last blog post... <a href="http://www.islandcrisis.net/2009/06/blog-trottoir-featuring-yashi/" rel="nofollow">Blog Trottoir Featuring Yashi</a></em></abbr></abbr></em> I normally do a backup each hour and is emailed to a dedicated email address (gmail is good).

I also use a plugin to encrypt password send during login… just in case sm smart guy is looking through his e-bino lol.

3rdly I think I can trust my current host as they backup the whole directory regularly each day.

Kurt Avish´s last blog post… Blog Trottoir Featuring Yashi

]]> By: Samrat Phttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8511 Samrat P Wed, 10 Jun 2009 15:35:00 +0000 http://www.dollarshower.com/?p=467#comment-8511 Thanks Ajith.. It was a very nice article.. I'll use this info to secure my blog"<abbr><em><abbr><em>Samrat P´s last blog post... <a href="http://feedproxy.google.com/~r/TechHail/~3/aBwcCKaBLBw/460" rel="nofollow">Grab a Facebook Username For Your Facebook Profile Page or Application Profile</a></em></abbr></abbr></em> Thanks Ajith.. It was a very nice article.. I’ll use this info to secure my blog”

Samrat P´s last blog post… Grab a Facebook Username For Your Facebook Profile Page or Application Profile

]]> By: Curious Little Personhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8488 Curious Little Person Tue, 09 Jun 2009 19:08:39 +0000 http://www.dollarshower.com/?p=467#comment-8488 Thanks for the information, I back up my blog using Database BackupNever knew you could be hacked as well! Thanks for the information Ajith!Cheers Sandeep<abbr><em><abbr><em>Curious Little Person´s last blog post... <a href="http://curiouslittleperson.com/2009/monetize-your-blog-the-right-way" rel="nofollow">Monetize your Blog the Right Way</a></em></abbr></abbr></em> Thanks for the information, I back up my blog using Database Backup

Never knew you could be hacked as well! Thanks for the information Ajith!

Cheers
Sandeep

Curious Little Person´s last blog post… Monetize your Blog the Right Way

]]> By: Jacques Snymanhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8484 Jacques Snyman Tue, 09 Jun 2009 18:32:48 +0000 http://www.dollarshower.com/?p=467#comment-8484 I think the bottom line here is the emphasis we all need to place on backups! That word will always come back to haunt you if you disregard it! Sorry to hear about your experience, but am glad that it is all Ok now, and that you're able to share the experience with us. Hopefully we all learn from this! I think the bottom line here is the emphasis we all need to place on backups! That word will always come back to haunt you if you disregard it! Sorry to hear about your experience, but am glad that it is all Ok now, and that you’re able to share the experience with us. Hopefully we all learn from this!

]]> By: Georgehttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8456 George Mon, 08 Jun 2009 17:35:06 +0000 http://www.dollarshower.com/?p=467#comment-8456 Eventhough the down time was less, it was a surprise for me.Because I was reading a post and after ten minutes I seen Ajit's tweep about the error.This is the lesson learnt post from the episode, good post. Eventhough the down time was less, it was a surprise for me.Because I was reading a post and after ten minutes I seen Ajit’s tweep about the error.

This is the lesson learnt post from the episode, good post.

]]> By: TechZoomInhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8453 TechZoomIn Mon, 08 Jun 2009 15:48:54 +0000 http://www.dollarshower.com/?p=467#comment-8453 I use Automated DB Backup..But i schedule it to get backup once in a week. Daily seems to be good option right?Thanks for the information Ajith.<abbr><em><abbr><em>TechZoomIn´s last blog post... <a href="http://www.techzoomin.com/260-miscellaneous-web-design-icons-download/" rel="nofollow">260 Miscellaneous Web Design Icons Download..!</a></em></abbr></abbr></em> I use Automated DB Backup..But i schedule it to get backup once in a week. Daily seems to be good option right?

Thanks for the information Ajith.

TechZoomIn´s last blog post… 260 Miscellaneous Web Design Icons Download..!

]]> By: Melvinhttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8452 Melvin Mon, 08 Jun 2009 14:48:08 +0000 http://www.dollarshower.com/?p=467#comment-8452 This is so true ajith. Most people give the excuse that they're blog isn't popular yet so theres no need for so much protection. I find it really retarded because hackers don't pick what popular and what's not. They just hack as much as they can...Btw, I've written a really nice post about subfolders nd stuffs located here http://www.melvinblog.com/2009/05/steal-wordpress-files/ (if i may spam please. :D )<abbr><em><abbr><em>Melvin´s last blog post... <a href="http://www.melvinblog.com/2009/06/mmo-blog-monetizer-launch/" rel="nofollow">MMO Blog Monetizer Launch</a></em></abbr></abbr></em> This is so true ajith. Most people give the excuse that they’re blog isn’t popular yet so theres no need for so much protection. I find it really retarded because hackers don’t pick what popular and what’s not. They just hack as much as they can…

Btw, I’ve written a really nice post about subfolders nd stuffs located here http://www.melvinblog.com/2009/05/steal-wordpress-files/ (if i may spam please. :D )

Melvin´s last blog post… MMO Blog Monetizer Launch

]]> By: Chetan Golehttp://www.dollarshower.com/blogs-are-more-vulnerable-to-hacking/comment-page-1/#comment-8451 Chetan Gole Mon, 08 Jun 2009 14:30:54 +0000 http://www.dollarshower.com/?p=467#comment-8451 I have written a post on <a href="http://www.thechetan.com/2008/11/make-your-wordpress-blog-secure-prevent-hacking-attacks/" title="Make your Wordpress blog secure [Prevent hacking attacks]" rel="nofollow">Make your Wordpress blog secure [Prevent hacking attacks]</a>, i mentioned few plugins there have a look :)<abbr><em><abbr><em>Chetan Gole´s last blog post... <a href="http://feedproxy.google.com/~r/TheChetan/~3/ohpsWB8r1BI/" rel="nofollow">Download Microsoft Bing ringtones - Free ! (Official Microsoft)</a></em></abbr></abbr></em> I have written a post on Make your WordPress blog secure [Prevent hacking attacks], i mentioned few plugins there have a look :)

Chetan Gole´s last blog post… Download Microsoft Bing ringtones – Free ! (Official Microsoft)

]]>