Recovering from WordPress permalinks hack

September 11, 2009

We have seen quite a few blogs hacked because WordPress was NOT updated on a timely manner. If you are seeing strange links in URL with eval… functions your blog was 0000wned…sorry :(

Use phpmyadmin or shell mysql command to replace some bad stuff:

update wp_options set option_value=” where option_name=’_transient_rewrite_rules’;

select * from wp_options where option_name=’permalink_structure’;

Check the above SQL select and see if you have any strange functions or code in wp_options field. Replace as required, for example:

update wp_options set option_value=’/%year%/%monthnum%/%postname%/‘ where option_name=’permalink_structure‘;

Comments are closed.