Forgotten Password Attack On WordPress
November 3, 2009 by Bill Hamilton
Filed under Other Rambling Thoughts
The WordPress Firewall plugin notified me of a new attack on my WordPress site today; an attempt to inject a file named “fgiwfi.php” via a “password_forgotten.php” injection. This was quickly followed by another e-mail alerting me to an attack from the same IP using the same forged link on another of my pages, but this [...]
Defending Against A SQL Injection Attack
October 24, 2009 by Bill Hamilton
Filed under Other Rambling Thoughts
One of my sites came under a SQL Injection attack today. The attacker used the following to attempt to attempt access:
/wp/index.php?cat=%2527+UNION+SELECT+CONCAT(666,CHAR(58),user_pass,CHAR(58),
666,CHAR(58))+FROM+wp_users+where+id=1/*
I have the SEO Egghead Wordpress Firewall and Lester Chan’s WP Ban plugin, so the notification of an attempt and the ability to block it were quick, but protection began early.
Changing the Admin User
The above [...]
