From ian@lovingboth.com Thu Feb 20 21:49:27 2020
From: Ian <ian@lovingboth.com>
To: users@mailman.bitfolk.com
Subject: Re: [bitfolk] Help needed with virus infection
Date: Thu, 20 Feb 2020 21:39:44 +0000
Message-ID: <508dc67a-b8dc-8277-8a2f-00f3ee063d36@lovingboth.com>
In-Reply-To: <20200220130409.GA29636@bitfolk.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7502875781209696183=="

--===============7502875781209696183==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Andy said:

>> The low-life had appended a <script> tag to this field on every
>> row.
>=20
> Glad you got it sorted. Did you ever work out how they got access to your d=
atabase?

If it's only the database that's been fiddled with, I'd be wondering=20
about the security around phpmyadmin.

I'd also check they haven't played with the users.

If you don't need a dynamic site (e.g. for comments) it's well worth=20
using one of the 'make a static site out of this' plugins, then pointing=20
the webserver at the results, and only having the WP site live when=20
you're editing it.

Ian (not that one)



--===============7502875781209696183==--