Fix Hacked WordPress Website | A Step-by-step Guide to unhack WordPress
If your WordPress website got hacked, don't worry. Follow the steps I do in this video and you might be able to fix your own hacked WordPress website. If you are unable to do it yourself, you can hire me! 👇🏻👇🏻👇🏻 Start here 👇🏻👇🏻👇🏻
Do you want to support my channel? Leave a like or buy Divi / Elementor Pro with 10% discount via the link below. That will help me enormously to create these free videos for you and keep going!
⇒ Software that I recommend:
✅ Hosting & domain ⇒ wp.discount/host/
✅ Best caching plugin ⇒ wp.discount/cache/
✅ Divi with 10% discount ⇒ wp.discount/divi/
✅ Elementor Pro ⇒ wp.discount/elementor/
⇒ Top video's I recommend:
• Yoast SEO vs RankMath ...
• Secure Your WordPress ...
• BEST Mailchimp Alterna...
• How to Migrate WordPre...
• How to Make a WordPres...
I want you to succeed with your website, so lets get started.
⏱️Timestamps⏱️
0:00 Intro
0:15 Check if you are really hacked
1:02 Login to hosting company
1:17 Change FTP credentials
2:05 Fix Database Error
4:06 Login to WordPress
4:46 Delete any strange Users
5:02 Inspect posts
5:24 Inspect pages
5:37 Inspect plugins
6:00 Update themes and plugins
6:12 Inspect your theme
7:04 Inspect themes
7:30 Inspect with FTP
8:28 Found Eval
9:00 Malware scan
10:36 Results of scan
13:03 Remove all malware
14:23 Restore permalink structure
Thank you for watching! 😀
✅For tips and tricks on getting the most out of WordPress, don't forget to subscribe: wpressdoctor.com/sub
📖Transscript📖
In this video we're going to clean a hacked website from a subscriber who reached out to me. If you follow my step-by-step instructions you might be able to clean your own website. We're gonna start, right now.
So the first thing we do is actually check if your website really has been hacked. How do you know that? Well if you try to reach your website and this is what you see, there's something wrong. But what you really need to check is go into Google over there, and type in site: and then you type in your url without www. like this feedforlifestyle.com. And I press Google search. This is weird. "Ugerichtkeit Latein Chronish" what is this? This is not supposed to be here. This is Dutch so that's okay. We'll go to the next one. This is oh redirects to amazon.com? So they created the blog I can see what's going on here. Alright so there's definitely something going on with this website. I asked my subscriber for the hosting login so we're going to log into the hosting page right now. All right we're at the hosting company so let's log in over there. Let's find out what we will see over here. We go to the dashboard I think. So I'm looking for some kind of CPanel but... oh its just this. That's okay let's go to FTP access. So the first thing we need to look inside of the website what is actually going on. To do this I'm gonna use FTP. If you have no experience with FTP, just follow this tutorial and I'll show you step by step how to install it, how to use it and how to get access to your own server. Very easy, just follow the steps. Alright now we are inside of the website. Let's go to web space in this case. Let me make this a little bit bigger for you guys. And then you need to go to httpdocs. Let's see what's in here. Then we have a WordPress installation I think. Yes. All right this looks good. Save it. All right then we have wp-admin, content includes. This is a normal WordPress installation which looks actually pretty fine. Let's scroll down a bit what we see over here nothing really. But when I try to reach the website this is what we see: "a database connection" if you go over here it is actually inside of this file. So we're going to view and edit it. Right click, and then you open up some kind of editor. In this case we have all this this. This looks actually pretty good. Let's see if it still connects to the database. And then I go into the hosting and I'm going to look for the... I need to find a way how to get my PHP database information from here. And I scroll down and in here we can see the database name. Let's see if this still works I'm going to copy this one. Name is actually the same. And I'm going to paste it, yes it is the same. So that's great. And then we just go 'Database information' over there, great. Now we have the database name and we have to see if the user is still okay. Let's check this user. User is great, and now when you edit the user you can also change the password. So I'm going to create a really safe password, I'm gonna save it. So now we have a new password for our database. We're gonna fill it in over here; database password. Paste it in. I gotta blur this out of course in the video. I'm going to save this file and go back to FileZilla. If I now go back my FileZilla ...
📖 Read the rest of the transcript at wpressdoctor.com/
Пікірлер: 65
Hi guys, I really hope you can unhack your website with this video. If you have any questions or need help, feel free to comment! If you want to hire me to get it done, check wpressdoctor.com/clean-hacked-wordpress-website/
After a long time I found what am I looking for. Thanks a lot Matt. Really & actually a great step by step tutorial. Go ahead. Expect more tutorial like this.
@WPressDoctor
4 ай бұрын
Hi there! You are very welcome! Thanks for the kind words, I really appreciate it. I’m glad I could help you out with this video. Stay tuned, more awesome tutorials coming up! Have a great day and take care 😀👍🏻
Nice video, Matt. As always, instructional and funny, with quite a few bassy effects 🙂. I appreciate the "detective" like approach which, when well done, is a great pedagogical tool.
@WPressDoctor
Жыл бұрын
Hi Ricodu! I’m happy you appreciate the style 👍🏻😀 Thanks for letting me know ☺️ yes it’s all about education while not getting bored haha. Have a great day and stay safe!
The WP Doctor is back in the hizouse!! 😃🙌🏻🎉
@WPressDoctor
Жыл бұрын
Hi Derek! Yes sir! I find always a pleasure in fixing hacked websites. This subscriber was actually REALLY happy after I cleaned his website. Its a very rewarding job as people are so extreme thankful 😊
Thanks Matt. Great Vid. Like the your tone. Makes the video fun to watch. Btw, I use kadence. It's great. Speed, support, functions...everything. Give it a try. (Not affiliated at all, just a happy customer)
@WPressDoctor
Жыл бұрын
Hi Fred! You are very welcome! It makes me happy to read your comment, thank you for taking some time to write me. I will check it out someday! I hope my other video's are also useful for you. Getting the word out there with your like and subscribe, and possibly a share would be much appreciated. If you want a free website review / audit, check wpressdoctor.com/audit
Thanks for the updated video. Hopefully I won't ever need to, but if worse comes to worse, it's good to know I can always refer back to this video.
@WPressDoctor
Жыл бұрын
Hi Al! You bet! If you are good secured and you have strong passwords, all should be good (unless your PC gets hacked 🤔). But every hacked website is different so I’ll keep making these videos 💪🏻😃
@Alex-hn3lc
Жыл бұрын
@@WPressDoctor -- Yeah, I am always proactive and follow the best practises. There are no excuses to use a weak username or password when you have a password manager that always generates strong login details. You are right, and security is an ongoing thing, so please keep updating this video and keep the hacked fixing videos coming because I'm loving them.
@WPressDoctor
Жыл бұрын
Good job and Thanks, will do!
@Alex-hn3lc
Жыл бұрын
@@WPressDoctor No problem + thank you. 🙌
Well well, that theme kadence is such a headech. I had the same issue and been deleting files and changing database pswords for months it fixed for 6days and come again in new directory. Ty doctor for this vidéo awesome work as always
@WPressDoctor
Жыл бұрын
Hi Zakaria! Thank you for your kind words, really appreciate it. Oh wow! Being hacked is indeed such a headache. Did you got it fixed in the end?
@ZakariaMesk
Жыл бұрын
in fact, I consulted my client and explained to him that he would lose all the website data if we reset it. He agreed to proceed. The issue occurred when we launched ads, and there were a lot of redirections. I followed both of your website cleaning tutorials and felt very happy when the website returned to normal. However, after a week, the issue resurfaced, and I had to start the cleaning process again. All passwords and links have been changed, and all the data has been updated and cleaned.
@ZakariaMesk
Жыл бұрын
So i had to reset the website and start over
@WPressDoctor
Жыл бұрын
Ah that’s to bad! Yeah sometimes it’s really a frustrating progress. Could be that they had sFTP acces?
Helpful! Thanks.
@WPressDoctor
Жыл бұрын
Hi James! You are very welcome! I’m glad I could help you out with the video. Have a great day and stay safe!
hi thanks for the helpful video! I have a question, what level of html, css, js, php do you need to know to become a professional wordpress expert (or to be like you)? Junior, middle, senior? In fact, why do you need to know these technologies?
@WPressDoctor
Жыл бұрын
Hi Zohid! You are very welcome! I’m glad you asked. To be a professional with WordPress some basic knowledge of CSS3 and PHP is necessary. You can also learn some JS but that’s just nice to know. But the best part of WordPress is that you actually can learn these things when already being building with WordPress for a long time. I learned these things 10 years later just because I wanted to haha, it’s not necessary but to become a expert - then yes, start with free simple courses 😀👍🏻
Bro you remind me of Christopher Walken (when he was younger ;) , thank you for your effort for us!
@WPressDoctor
8 ай бұрын
Hi Skobixus! That's kind of you 😍 Thanks for the sub and comment! I really appreciate it. You are very welcome! I hope with these video's a lot of people are helped. Have a great day and stay safe!
Thanks Thanks Thanks my 500 plues site hack but after your video is very well working
@WPressDoctor
11 ай бұрын
Hi there! You are very welcome! Thank you for writing a comment. Really appreciate that! I’m glad you got it fixed! That’s why I made these videos 👍🏻😀 Please consider a like and subscribe or maybe a share for my video, that would help me a lot! If you want a free website review / audit, check wpressdoctor.com/audit
That's Good 💯
@WPressDoctor
Жыл бұрын
Hi Talha! Thanks! I’m glad you liked the video 😀👍🏻 Have a great day and stay safe!
hello Matt, thanks for the greate content. I have checked my website on all platform appeared that there is no malware ( scanned with Quttera and google safe browser). however, when I check on google search result with site:my website there are a lot of gambling results. When I clicked them there are 404 pages. I do not know I can get rid of them. It is just mess with my reporting. Can you please help. thanks in advance.
@WPressDoctor
Жыл бұрын
Hi there! It seems that you already cleaned your website? Then in this case the results will vanish and you are good to go. If you haven't cleaned up your website, some nasty malware is hiding itself for your admin login or hiding its tracks for your IP adres. If you send me ur URL i can take a look.
Hiya Matt, you ask for ideas on future video guides, well heres a massive one. How about you show us your process from start to finish, the whole process of "Handing off your site to a client" Even down to the "Final" configurations of the working site, there you wanted a challenge :) I dare you...
@WPressDoctor
Жыл бұрын
Hi Marc! Thanks for your great idea. It’s already on my list! Your not the first ☺️ reason why i have not already created it is because I’m struggling to make it not just a video with me only talking in the camera - so the content is not the problem - i work in a very specific way with all clients that ALWAYS works great for me and the client - but the format is. How would you prefer to see such a video?
My case is a little bit different from this one. I can not access the website also i was unable to access it via ftp.
@WPressDoctor
Жыл бұрын
Hi Talha! That’s weird. How can you not acces your website with FTP? Reset password and create a new user - that should do the trick 😀👍🏻 SFTP should always work from your hosting… why didn’t it work? Did you were able to fix it?
@talhaqayyum2963
Жыл бұрын
@@WPressDoctor No Sir. Actually I tried to connect it as you told in the video, using FileZZilla. But i was not able to fix it. It is giving me the timeout error. I tried increasing the time but it did not work either.
hello sir my websites is also hacked and not opening
@WPressDoctor
5 күн бұрын
Hi there! Thank you for your comment. That does not sounds good... can you fix it?
I'd ask you about my site but this evil platform won't allow me to leave links to it.
@WPressDoctor
5 күн бұрын
Hi there! Thanks for your comment. Yeah that's kind of KZread's policy and spam protection 😎. What was the question than?
Are you doing it for free or not? I have a website they hacked too
@WPressDoctor
Жыл бұрын
Hi Muzamil! Thanks for the question. Yeah I do it for free if I can make a video about it. Most people don’t want there business name pop up on KZread and be associated with hacked, so they pay me to do the job 😀👍🏻
@muzamilirf
Жыл бұрын
@Matt - WPress Doctor i have a website which have hacked by Japanese spasm seo. I apply all your videos but none of them worked. If you can take my website as a study case and show to your audience i am here to share the details with you on email
@muzamilirf
Жыл бұрын
It was a great video and i learned alot from you. Love you man the way you explain everything ❤
@WPressDoctor
Жыл бұрын
Ok that sounds like a interesting challenge. You can send it to the@wpressdoctor.com 😀👍🏻
@woizombi
Жыл бұрын
@@WPressDoctorJapanese spam seo get me here, so this will be great to see..
Hallo Matt, het is verzonden. 5:32
@WPressDoctor
Жыл бұрын
Thanks!
After you delete these viruses, they come back a day later.
@WPressDoctor
19 күн бұрын
Hi there! Thanks for the comment. If you have cleaned the site and deleted all backdoors/webshells, it should not come back. If it does, than your website wasn’t cleaned properly….
@anilyildirim
19 күн бұрын
@@WPressDoctor I do the same as you show, but after a day or two the viruses come back.
@WPressDoctor
17 күн бұрын
Then you missed thing somewhere… you can always hire me to do the job, see wpressdoctor.com/
Kadence is said “Kay dense.”
@WPressDoctor
Жыл бұрын
Kay dense! Thanks Derek!!! 😀😁 I’m going to remember this one 💪🏻
Username: admin if you do not change this you asked to be hacked. You can move the wp-config.php file to the root folder. XML-RPC hack is still a favorite hacking method. In the wordpress settings disable pinbacks. Your site is safe. Leuk kanaal zeker de divi tutorials. Gebruik het zelf al 7 jaar als professioneel wordpress ontwikkelaar.
@WPressDoctor
Жыл бұрын
Hi thanks for the great comments. Very good stuff! Dank, er komen meer Divi tutorials aan 😀