My website hacked

I am using ubuntu 16.xx with vesta cp

Yesterday someone hack my wordpress site and change url in database also all image description column, all contact column he set a ads link java script in hole database. yesterday i recover my site now today he have done same thing again. i think he attacking from mysql side.


Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi there @anwarul123,

I would recommend making sure that you change your MySQL password in this case and also make sure that port 3306 is closed for the outside world.

Also if you are using a CMS like WordPress or Joomla, make sure to update all of its plugins and themes to include the latest security patches.

If you are using WordPress specifically make sure to follow the steps from this answer here on how to secure it:

Another thing that I could suggest is checking your access logs for any suspicious POST requests which could have been used to exploit your website.

Let me know how it goes. Regards, Bobby