how to prevent wordpress custom theme hacking - wordpress

I have a problem that every some days my theme has changed and add one file upload form.In wordpress editor i found some hacking code
so how to increase my security in wordpress theme

Basically, you have to keep your website updated with latest version of Wordpress and your plugins as well in order to not leaving yourself open to attacks.If your username is "admin" and your password isn"t strong enough, your site is defenceless to a malicous attack. Never use admin as your user name. I recommend you to install "wordfence security" plugin for your website"s security.

Related

How to replace wp-admin with any text from wordpress admin URL?

What is the easiest way to replace wp admin from wordpress admin URL?
Basically I want to change http://localhost/wpsite/wp-admin
with http://localhost/wpsite/myadminpanel.
Here is a support page for one hosting provider, which suggests installing one of the plugins below to achieve this:
Lockdown WP Admin (this one seems a bit old now)
iThemes Security
And don't forget make a full backup of your website, before doing any of the changes!.
I'm Using this plugin ( https://wordpress.org/plugins/wps-hide-login/) and for me it work fine and it is very easy to setup

WordPress website pages are redirecting to adult site pages

I have a website built on WordPress platform. Today, when I opened the website and when I clicked anywhere on the website, adult site pages are opening up continuously.
Can anyone please suggest what could be done to resolve the issue?
Your site is hacked by someone and some script injected in your WordPress installation or database which causing to load this video your website need to scan your website using plugin like SECURI You can get this on Securi.net
Here are some solutions that you can try(Remember to take a backup before using this)
Check and clean all your recently modified files
Contact your hosting provider if you are not using dedicated server.
If you have some inactive themes and plugins which you don't need more remove them.Hackers can hide script there.
-You can upload new word-press core files which you haven't customised.
Install fresh copy of themes and plugins if you not customised them.
Change your secret keys in your wp-config file.
Check users in your word-press and delete suspected ones.
Check permission of your installation directory .if not secure them make changes.
Change you WordPress password
If this all not works to solve problem let me i will look into it.

Wordpress Administrator access to plugins page

I recently downloaded the Advanced Access Manager Plugin for wordpress and accidentally removed the capability of the administrator to view the plugins page. Is there a place I can access the users/administrators capabilities with the wordpress php files to fix my mistake?
Go to the Access Control page i.e. http://example.com/wp-admin/admin.php?page=aam
Go to the Capability option and click the plus icon to "Add New Capability"
For the Capability Name add each of the following:
Activate Plugins
Update Plugins
Delete Plugins
Install Plugins
Edit Plugins
After adding the above refresh the page (might need to do a hard refresh).
The Plugin options should be added back.

Wordpress chosen theme doesn't load

I have developed a wordpress theme and have uploaded and chosen that at http://www.digitalmanager.pk/ The problem is, when I am logged in my wordpress acccount on this sight, it shows the correct theme i.e. the one that I have chosen. But as soon as I logout of my wordpress account, it shows the default 2014 theme. Below is the screenshot, when I am logged in:
And the other one you can check for yourself by visiting the site at http://www.digitalmanager.pk/
P.S. I have removed the cache and tested but nothing changed.
It may be due to WP Super Cache Plugin. Just deactivate the WP Super Cache plugin from the Installed Plugins. Then upload upload your theme again.

Plugins menu doesn't appear in the admin panel

I'm having a very simple problem. I'm new to WordPress and I'm trying to install a plugin.
Everyone says there's a "plugins" option on the sidebar-menu in the admin panel, but I don't see one! I've looked for it in all the sub-menus too.
Whenever I try to search for this problem, I get results about creating a plugin to show on the admin menu.
Anyway, how can I get the plugins menu to show up?
The issue is almost certainly related to one of two things:
1) You don't have permissions (are you logged in as admin?)
OR
2) The theme (or a plugin) has disabled the plugins menu.
After you've checked to be sure that you are an administrator, then you should attempt to view this page:
http://www.yourdomain.com/wp-admin/plugins.php (replacing www.yourdomain.com with your site's domain name).
If it's accessible, then it's time to start exploring the theme (which theme are you using?) and possibly some of the plugins that might have disabled the menu item.
FYI, the method to remove dashboard menu items is covered here: http://www.wprecipes.com/how-to-remove-menus-in-wordpress-dashboard
If you did double check your file permissions (i.e. 755 for folders and 644 for wordpress files on Linux), please consider editing your wp-config.php file and change
define('DISALLOW_FILE_MODS',true);
to
define('DISALLOW_FILE_MODS',false);
The Add New option in Plugins menu will show up, also if you have internet connection, possible updates will be shown up.
This what I found looking for the same problem, I guess this is your situation also:
If your site is hosted on WordPress.com:
Plugins: Plugins are tools used to extend the functionality of the WordPress platform. However, they are only applicable to self-hosted blogs and web sites using the WordPress.org software. Plugins are not permitted here at WordPress.com for various security reasons.
On wordpress.com hosted sites, you don't have permission to install plugins. You must have an own wordpress installation to do that.
I found this post searching for help with a similar issue with a self-hosted WordPress installation -- in this case it was a site that a friend had paid someone to make, but then took them off the work and asked me to help out.
There were several regular menu options missing -- it turned out to be down to a plugin called Admin Menu Editor that the previous web guy had installed to limit the options available to my friend, so they wouldn't mess with things.
In this case I could access the options for Admin Menu Editor by going to http://www.example.com/wp-admin/options-general.php?page=menu_editor
In one of my cases it turned out to be strictly file permission thing so apache users could not access the plugins directory.
I have never seen that problem before. However, try either expanding all the current menu items to see if "plugins" are listed there, or try deactivating some/all of your plugins to see if one of the plugins are conflicting somehow and making your plugins menu not display.
I know this is an old question but I hit this problem at work recently with a WordPress site I inherited that had been originally developed by an external company. I tracked it down to the roles assigned to the user account. The "admin" account I had been given was actually assigned a restricted role that didn't have permission to access most of the settings.
Fortunately, I have access to the database so I was able to modify the assigned role directly. The default database prefix in WordPress is wp but you may need adjust these steps according to your own database.
First, find the user_id in the wp_users table for the account you want to modify and then run the following SQL against your WordPress database.
UPDATE wp_usermeta SET meta_value = "a:1:{s:13:""administrator"";b:1;}" WHERE user_id = {your_user_id} AND meta_key = "wp_capabilities";
UPDATE wp_usermeta SET meta_value = "10" WHERE user_id = {your_user_id} AND meta_key = "wp_user_level";
The next time you log in with that user account it should now have administrator privileges.
If you are using the multisite feature of Wordpress you will only see the plugins menu if you are super admin.
In the menu go to "My Sites" at the top of the page then click "Network Admin". (If you do not have this option you are not super admin.) Under "Network Admin" click "Dashboard" and then the plugins menu will appear. In your Network settings you can enable plugins for the sites.
The issue I was having was even trickier: No one was super admin. I fixed this by overwriting the "is_super_admin" function (simply returning true always) and then editing the settings as needed, before removing the overwrite again.
If you install a local WordPress the Plugins sub menu will not appear for any of the sites you work. Click My Sites area at the top of the page then click Network Admin and then click Dashboard. The Plugins sub menu will appear there. Then install new plugins and use it on sites on which you are working.
Good luck.
For me, changing lines in wp-config.php worked. I changed:
define('DISALLOW_FILE_EDIT', true);
define('DISALLOW_FILE_MODS', true);
to
define('DISALLOW_FILE_EDIT', false);
define('DISALLOW_FILE_MODS', false);
There might be a couple of reasons for the same. Some of them are:-
Reason 1 - When the website is hosted on wordpress.com
Reason 2 - When the user is logged in with a non-admin account
Reason 3 - When the WordPress website/blog is a part of a multi-site-network and the network admin has disabled the plugin menu
Reason 4 - Plugins Conflict

Resources