Posts tagged as ' Wordpress takeover ' ...

08 May 2009 @ 8:04 PM 

Hello

Sometimes if your wordpress DB is down, you should normally get an error saying that the DB is unavailable and then some messages will appear with the possible cause of this, like the DB name is not found, the settings in the wp-config folder are wrong, and the like. However there is a case that surprise surprise you get on the page with the INSTALLATION of wordpress and you’ve just lost your WP blog.

The file is found in wp-admin/install.php

As a good rule of thumb, it’s advisable to delete all readme.txt, nfo, info files from all plug-ins, there have been reports of some chinese bots crawling wordpress blogs for these, so save yourself some bandwidth and delete those

In order to make sure this doesnt happen at all, there are 3 methods

  • Method 1: JUST NUKE the INSTALL.php file. After the blog has been installed you dont need this file anymore so just delete it
  • Method 2: htaccess file
    # PROTECT install.php
    <Files install.php>
     Order Allow,Deny
     Deny from all
     Satisfy all
    </Files>
  • Method 3: Replace it entirely with something else that is written by you from the start

Problem Fixed

Posted By: Dinulescu Alexandru Adrian

Last Edit: 07 Jan 2010 @ 11:14 PM

EmailPermalinkComments (0)