Nice job recovering your password, however, the exploit probably still exists so you might get hacked again. Your next step is to find and seal up the security hole. It could be a plugin. It could be a theme. Download and run the Sucuri plugin to help you figure it out.
Have asked my hosting support to check my DNS and there were 2 entries because I added an A record in WHM and also added the subdomain to the account in cpanel, they have removed one and all is now working. Apologies for posting in WordPress, not technically WordPress related as I first thought.
If this question refers to WordPress.com then your question should be asked of their support rather than here. In general though… just a thought…, htaccess files are hidden files so the file name is preceded with a dot/period, ie. ‘.htaccess’. If you are using an FTP/SFTP client, they sometimes do not show hidden files by … Read more
“Authorization Required” message is from the Apache world. Looks like you have set the basic authentication in apache for the login page. This is simply indicated by the “pop-up” type of the error.
Go to Settings/Permalinks and add the static string to to the permalink structure: No need to touch the .htaccess. Update To make WordPress sending a hash # for its post permalinks you have to filter pre_post_link to make the structure ‘#%postname%’ and post_link to remove trailing slashes: add_filter( ‘pre_post_link’, function( $permalink ){ return ‘#%postname%’; }); … Read more
You could try this: RewriteCond %{REQUEST_URI} !^/wp-admin RewriteCond %{REQUEST_URI} !^/wp-login\.php(.*)$ RewriteRule ^blog/(.*)$ /news/$1 [R=301,NC,L]
try to go under “Settings” -> “Permalink” and save again the settings. You need to flush the permalink
Check the image file permissions. And check the path in page source to be sure the images are in the correct location.
I wrote a blog post a while back, this is a quick and dirty hack to make hackers think your wp-login.php is a 404 page. http://dave.kz/hide-your-wp-login-page-from-hackers/. (From blog post) Basically, I’ve added… header(“HTTP/1.0 404 File Not Found”); to the top of the wp-login.php page. Hopefully the attacker is looking for a 200 HTTP response. In … Read more
WPMU Ldap Authentication was causing the incorrect URL issue. Disabling the plugin allowed users/sites to be created correctly. This site has a fix for the plugin that allows it to run properly in WP 3.5.2: http://www.fotan.net/wpmu-ldap-plugin-fixes/