Help, my site got hacked multiple times

[danger]

Hello,

My website has been hacked recently. I replaced the passwords of the database, the FTP, the Wordpress accounts. I replaced all the Wordpress files except WP-Content.

But every time it happens again. Do you have any advice?

 

[alyx]

@danger Use wordfence Plugin... the problem will be solved and hire an expert who can remove malware and restore your site and provide proper security not to be hacked again...

Still, if you need any help you can DM me!

 

[kalee]

What type of server infrastructure are you on?

 

[danger]

@danger Use wordfence Plugin... the problem will be solved and hire an expert who can remove malware and restore your site and provide proper security not to be hacked again...

Still, if you need any help you can DM me!

I have Wordfence. But everytime they change my index.php file.

 

[alyx]

I have Wordfence. But everytime they change my index.php file.

after this, you need expert help... dm me

 

[benjamen]

I have Wordfence. But everytime they change my index.php file.

u inform to ur hosting server team. in case ur hosting account is hacked try to another mail to raised the complent to hosting provider

 

[danger]

u inform to ur hosting server team. in case ur hosting account is hacked try to another mail to raised the complent to hosting provider

I don't think it's a physical person doing this, but rather a bot. Each time it adds Wp File Manager and change index.php..

 

[Custom B]

I don't think it's a physical person doing this, but rather a bot. Each time it adds Wp File Manager and change index.php..

Are you on shared hosting or VPS?

 

[Professor X]

My best advise to you is to move away from Wordpress

 

[alyx]

u inform to ur hosting server team. in case ur hosting account is hacked try to another mail to raised the complent to hosting provider

They can't help... website owner's PC can be compromised like his using a chrome extension which includes malware or server backdoor setup or something...

 

[alyx]

My best advise to you is to move away from Wordpress

Whenever you try to learn WordPress youtube... it's happened that whatever you try will be hacked. So, knowledge required not quitting platform.

 

[alyx]

Are you on shared hosting or VPS?

doesn't matter at all...

 

[alyx]

I don't think it's a physical person doing this, but rather a bot. Each time it adds Wp File Manager and change index.php..

that's called a backdoor.....

 

[danger]

that's called a backdoor.....

Yes it's a backdoor, but I can't find it. Replaced all wordpress files, changed all password, but still there..

 

[BlackMAry]

Hello,

My website has been hacked recently. I replaced the passwords of the database, the FTP, the Wordpress accounts. I replaced all the Wordpress files except WP-Content.

But every time it happens again. Do you have any advice?

Hello,
I think that I can help you to fix it. or I do my best
Please DM me if you still need it.
thank you

 

[jos4kay]

Just buy sitelock and have peace of mind.
I think hosting companies are deliberately leaving backdoor opened just to sell antivirus.

You might want to consider, @Manni elnhost. I have been hacked multiple times on various hosting companies, but it stopped at elnhost

 

[Loki]

Just buy sitelock and have peace of mind.
I think hosting companies are deliberately leaving backdoor opened just to sell antivirus.

You might want to consider, @Manni elnhost. I have been hacked multiple times on various hosting companies, but it stopped at elnhost

most hosting company steal their client informations, and put backdoor on their server

 

[Loki]

Hello,

My website has been hacked recently. I replaced the passwords of the database, the FTP, the Wordpress accounts. I replaced all the Wordpress files except WP-Content.

But every time it happens again. Do you have any advice?

shared hosting or vps?

 

[jos4kay]

shared hosting or vps?

Its a shared hosting, its good alternative if budget is slim.

 

[johnc]

Use mod_security with decent rules.
There is no other way to prevent site security and if possible use Imunify360 (Paid) plugin in your server.

All other methods are useless.