Upgrade Complete, and hopefully now safe from the hacker
Yeah, I was hacked. My own fault for not keeping this installation up to date.
I’ll be hopefully getting client sites upgraded soon too. This was not fun.
More info here and here. On this site it took the form of links added into the template files, and with a display: none; div surrounding them. Luckily the hacker was such a bad coder that I noticed pretty quickly that my blog didn’t validate, so I looked at source code and there they were. I think I caught things pretty quickly. I hope I did. I don’t want outbound links to vicod*n and v*agra.
** Update! **
These hacks are apparently very widespread. If you aren’t running the latest version of wordpress, I urge you to UPGRADE NOW.
More info here:
I was hacked (Wordpress)
Patching the Wordpress AnyResults.net Hack
And some Security Goodies you can install to avoid this in future. I’ve linked to the first one in the series, the others are linked from that post:
