PHP and WordPress Encryption and Decryption Tutorial
This is the example I built while learning how to properly protect password before they are stored in the database. I’ve seen dozens of plugins simply take in API paramters like “username and password” and just store those values in the database for use. How horrible is that! We decided to do the right thing and learn about encryption security…
read more- by Seth Carstens
- posted at 3:55 pm
- April 26, 2013
- 0Leave a comment
WordPress Security Threat: WooThemes Canvas Theme
Note the details of our latest malware scan and identification of a WordPress site that was hacked.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
************************************************************** A malware scan on the account shows that account is infected. ************************************************************** malware detect scan report for cloud.myhostnameservers.com: SCAN ID: 062512-1008.7692 TIME: Jun 25 10:08:50 -0500 PATH: /home/ACCOUNT/public_html TOTAL FILES: 3956 TOTAL HITS: 2 TOTAL CLEANED: 0 NOTE: quarantine is disabled! set quar_hits=1 in conf.maldet or to quarantine results run: maldet -q 062512-1008.7692 FILE HIT LIST: {HEX}php.cmdshell.unclassed.344 : /home/ACCOUNT/public_html/DOMAIN.com/wp-sys.php {HEX}php.cmdshell.unclassed.344 : /home/ACCOUNT/public_html/DOMAIN.com/wp-content/themes/canvas/inc.php ************************************************************** |
- by Seth Carstens
- posted at 4:12 pm
- June 25, 2012
- 0Leave a comment
