Answers Next

Answer #2

Regarding the hosting companies, we have backend virus scanners and scripts, permissions checkers which keep working in the background but the hackers keep finding ways to get into our servers. No one can help you secure and backup your data even though promised, you need to have your own copies for sure.

Answered By: Amit Bhawani [ ]

Answer #4

i)But is there any plugin / software, which can send alert message immediately when the iframes are injected to our site?

I dont think there are any alert plugins which can get this job done.

ii) Is there any plugin / software which will automatically reject the iframe injection?

Most security plugins would notify you in the backend for insecure folders and script problems. Need to find any scripts like the one you asked for.

iii)Will WP Security Scan plugin stop the iframe injection? or it will do just scanning like exploit-scanner plugin?
As i said it wont be able to stop it completely.

Answered By: Amit Bhawani [ ]

Answer #6

The features of that programs are :
1.) Hacker injects code, increasing the file size.
2.) Next request to serve the home page (or other page of your choice) triggers the detector, which compares current file size with that for archived original.
3.) Detector sends email with file mod timestamp to webmaster.
4.) Script replaces hacked file with copy of an archived original, exits.

You need to add the following code on the top of index.php after DOCTYPE declaration and also enter your email address in this code.

function hackDet () {
$tst = “”;
$gzt = “index.php”;
$stat = stat($gzt);
$gzt2 = “refz/x_” . $gzt;
$rstat = stat($gzt2);
$ref = $rstat[size];
$rtim = $_SERVER['REQUEST_TIME'];
$rtim2 = date(“F d Y H:i:s.”, $rtim) . ” Eastern”;
$mtim = filemtime($gzt);
$mtim2 = date(“F d Y H:i:s.”, $mtim) . ” Eastern”;

if ($stat[size] <> $ref)
{
$fw = “index.php”;
$hak = file_get_contents($fw);

$msg = “$gzt has $stat[size] bytes and not $ref as it should.\n\n”;
$msg .= “FILE MOD TIME $mtim: $mtim2\n”;
$msg .= “REQUEST_TIME $rtim: $rtim2\n\n”;
$msg .= “=================\n\n”;
$msg .= $hak;

$msg = wordwrap($msg, 70);
mail(‘ yourn…@yourdomain.comThis e-mail address is being protected from spam bots, you need JavaScript enabled to view it ‘, ‘HACK ALERT’, $msg);

$fr = “refz/x_index.php”;
$str = file_get_contents($fr);
$tst = file_put_contents($fw, $str);
}
return $tst;
}

$tst = hackDet(); // calls the hack detection function
?>

Answered By: Amit Bhawani [ ]