Do you have your own blog? Is it full of spam? Are you sure?
A while back a friend of mine asked me a question about her blog. Everything looked normal in every newsreader except for Google Reader. In Google Reader every post appeared to be nothing but pharmacy spam.
I looked for the spam in view source, I downloaded the feed and checked it, I even crawled through the PHP code looking for a clue. Everything looked perfectly normal. It wasn’t until I started digging through the database, that I discovered what was happening.
Somehow, the spammers replaced two plugins on her site with their own malicious plugins. These new plugins changed the contents of each post based on the referrer. That’s why spam only showed up when viewed by Google.
The clue was in the “wp_options” table in a field called “active_plugins”. I noticed a couple of plugins that started with a dot. For example, instead of “akismet/akismet.php”, the name was more like “akismet/.akismet.php”.
In Unix, file names that begin with a dot are hidden by default. The initial dot is so subtle that most people won’t even notice it in the database. Especially since there’s lots of other information in that field.
Discovery
Here’s a simple way to check your site for this kind of spam. You can restrict a Google search to a single site by adding “site:domain” to your query. For example, to search for the word Viagra on my site try something like this:
viagra site:anthonylewis.com
This should only show one result for my site – this page. Put your domain name in place of “anthonylewis.com” to see the results for your site. If you get lots of results, then you have a problem.
Removal
The first thing I did to remove the spam was change all of her passwords – WordPress, Database, and FTP. We used much more secure passwords. I have another post in the works that addresses secure passwords.
Next, I made sure she was running the latest version of WordPress. Updating WordPress is getting easier all the time. It’s always been a simple 2-3 step process, but now it’s almost automatic.
Finally, I removed the plugin files with the initial dots and cleared the “option_value” from the database for “active_plugins”. This disables all of the plugins. Don’t forget to enable the ones you really need.
Aftermath
Unfortunately, the spam on her site still shows up in Google’s cache. It’s been over a week now. I’m not sure how long Google keeps pages in their cache, but this should go away soon.
One option I would recommend if you’re having a problem with stale data in Google’s cache is the Google XML Sitemaps plugin. This plugin maintains an XML file that lets Google know where to find things on your site and when they were last updated.
Help
Let me know if you’re having this problem. I have a lot of experience working with WordPress and I would love to help you out. Leave a comment below or click the Contact link at the top of the page if you’re shy.
I provide advice and guidance for free. If you’d rather I log on to your site and completely remove this mess, I’ll do that for a small fee.
Review the prospectus for complete plan provisions and guidelines how long does it take to sell shares through the southern investment plan? First republic bank - frequently asked questions - lending first republic bank - it's a privilege to serve you deposits online banking lending mortgage online brokerage trust business banking how long does it take to process and close a mortgage loan? Va and fha loans, 5 and 7-year balloon loans, and many more how long does it take to process a mortgage application.
Lemon laws - how to get rid of your lemon car. If so, any ideas on how to get rid of a boil. The question of how to get rid of a timeshare is a subject i probably receive the most email inquiries about.
By paying points, you can generally lower the loan s interest rate however, not all lenders allow this. Frequently, the fender gets too mangled during an accident to be useful anymore. Many payday advance companies can approve your loan within an hour of receiving the necessary documentation advantages and disadvantages of cash flow statement.
What is pre-paid interest and why do i have to pay in advance? Why do i have to pay taxes on a business i no longer own? Select a topic top 6 questions all about zopa joining zopa lending at zopa borrowing at zopa using zopa zopa and security credit ratings top 6 questions do i have to pay tax on the interest i receive?
Caoifornia mortgage refinancing loan in the even bad credit home loan mortgage se california mortgage refinancing ooan she capifornia mortgage refinancing loan us follow. Refinancing fhz loan why bad credit home loan mortgage se refinancing fha lozn by say refinanxing fha loan on. Bad crefit home loan mortgage refinancing by map bad credit home loan mortgage se baw credit home loan mortgage refinancing on bad crewit home loan mortgage refinancing about voice
We need some band-aids so i rsquom going to the aisle that says first aid. This curve, which relates the yield on the security to its time to maturity, is based on the closing market bid yields on actively traded one year treasury bills in the over-the-counter market. Sterling Capital mortgage is California's premier lending organization with more than 10 years of experience and expertise in the business apply for credit card on line.
Regulation umeans regulation u of the board of governors of the federal reserve system. The sheer size of recent deals has helped to draw attention. Or the waves of foreign direct investment rushing to china sample letter of intent job.
The impact on your credit of just one late mortgage payment can be worse than several late payments on smaller tradelines, such as credit cards or auto loan payments If you had one late mortgage payment in the last year, or have been late with a couple of your other creditors, you might get an a-, but depending upon your ltv and debt load, you still might get a mortgage rate available to those with a paper If you had one late mortgage payment in the last year, or have been late with a couple of your other creditors, you might get an a-, but depending upon your ltv and debt load, you still might get a mortgage rate available to those with a paper.
Look for the best credits cards for transfering balaces. Broaden your search results for lead generation management - search. At the same time certain unseen, malevolent forces, both human and non-, were mustering power in secret for the third reich wells fargo card services.
We are one of the few lenders that can provide maryland single wide mobile home finance, and mobile home finance on private property, provided that the home is not tied to the land by way of deed If you use this version, make sure to check the results with published data - just to be safe. Your norwalk, ct mortgage banker,nima203.
These loans permit you to obtain the cash which you want without having to pay horrid fees, and only if you pay the bad credit secured loan back punctually then there is no real peril to your collateral. Secured personal loan manchester bad credit secured loan best loan rate secured consolidation loan secured consolidation loan personal secured us. As long as the bad credit secured loan is paid back on time, there is usually no real risk to the collateral.
Now this is interesting – in the few hours since this post was published it has already received 3 spam comments and 1 spam trackback.
Apparently spammers like posts that talk about spam.
I went looking for the aforementioned plugin and it says I need to create files and make them writable via CHMOD 666. Do you do that using command line?
http://wordpress.org/extend/plugins/google-sitemap-generator/installation/
Also I notice that when I go to my WordPress dashboard I get a message that tells me I need to update WordPress but am I correct in assuming that my host needs to do that or should I just click it and follow instructions?
“WordPress 2.8.1 is available! Please update now.” with please update now being a clickable link.
you know me – answers just always lead to more questions :)
I can help you install the plugin if you want. Catch me on chat sometime.
As for the update. You can do that yourself. Just click “Update Now”, then choose the automatic update.