I am using ubuntu 16.xx with vesta cp
Yesterday someone hack my wordpress site and change url in database also all image description column, all contact column he set a ads link java script in hole database. yesterday i recover my site now today he have done same thing again. i think he attacking from mysql side.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there @anwarul123,
I would recommend making sure that you change your MySQL password in this case and also make sure that port 3306 is closed for the outside world.
Also if you are using a CMS like WordPress or Joomla, make sure to update all of its plugins and themes to include the latest security patches.
If you are using WordPress specifically make sure to follow the steps from this answer here on how to secure it:
https://www.digitalocean.com/community/questions/how-to-secure-wordpress-without-a-security-plugin
Another thing that I could suggest is checking your access logs for any suspicious POST requests which could have been used to exploit your website.
Let me know how it goes. Regards, Bobby
Hi there,
You can install malware detection software like Linux Malware Detect, also known as Maldet or LMD. It will help you to locate any malicious files on your droplet.
If you’re interested in securing your droplet (everyone should be in general) you can double-check our tutorial - An Introduction to Securing your Linux VPS.
The article will cover the basic and some more advanced steps in website and server security.
You can check the article here:
https://www.digitalocean.com/community/tutorials/an-introduction-to-securing-your-linux-vps
Hope that this helps!
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.