Old WordPress Versions Under Attack – UPGRADE ALERT
- Sunday, September 6, 2009, 4:52
- Berita, Pengumuman
- 437 views
- Add a comment
Kepada pengguna WordPress yang masih belum upgrade ke WP 2.8.4, sila upgrade blog anda kepada version yang terkini. Maklumat dari wordpress developers mengatakan pengguna blog versi lama terutama sekali pengguna yang mengaktifkan fungsi “Anyone can register”, paling mudah terkena serangan ini. Untuk pengguna versi sebelum 2.7, anda perlu upgrade secara manual.
Pengguna wordpress.com, anda tak perlu risau sebab kat situ memang diorang dah upgrade ke versi terkini.
Source : Lorelle
Otto42 of OttoDestruct, a key WordPress developer and supporter, reports that there is an “attack” on older versions of WordPress right now. The number of sites hit by this is growing every hour. Protect your WordPress blog now: UPDATE NOW!!!
How Do I Know If My Site Has Already Been Attacked?
There are two clues that your WordPress site has been attacked.There are strange additions to the pretty permalinks, such as example.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFERER%5D))%7D%7D|.+)&%/. The keywords are “eval” and “base64_decode.”
The second clue is that a “back door” was created by a “hidden” Administrator. Check your site users for “Administrator (2)” or a name you do not recognize. You will probably be unable to access that account, but Journey Etc. has a possible solution.
WordPress.com blogs are not impacted as they are up-to-date. Only versions prior to WordPress 2.8.4 are impacted.
Korang try baca ni pulak;
About the Author
Zairul is a full time mechanical designer and part time blogger, spending most of his free time with the family and guitars and music and the internet. He has been living in Japan for more than 10 years now and couldn't wait to go back home..
Write a Comment
Gravatars are small images that can show your personality. You can get your gravatar for free today!