3 ms·
This really doesn't surprise me in the slightest. I inherited a Wordpress site someone hacked up for a friend of mine a few months ago. Until then, I wasn't qui
by bananas 13y ago
This really doesn't surprise me in the slightest. I inherited a Wordpress site someone hacked up for a friend of mine a few months ago. Until then, I wasn't quite aware of the ability to slide malware into it (it was an oldish version of WP).
As it was a relatively static site, I extracted the templates, removed the malware (which had injected itself into the header) and fudged it all into Jekyll[1] and uploaded it again as a static site to webfaction and changed the DNS entries.
Problem solved. Permanently.
I really wish people would do this more rather than pile loads of poorly maintained crap onto shared hosting.
[1] http://jekyllrb.com/ http://jekyllrb.com/
- eli 13y agoI really like static sites too, and that's what I use on my personal blog... but the bar for administering a Jekyll site is much higher than a Wordpress one. Especially if you run Windows, or have multiple contributors, or need a contact form or some other server-side processing -- all pretty common things.
- csixty4 13y agoThe functionality this is exploiting, pingbacks, is the kind of dynamic, API-driven feature you can't get on a static site. It's a trade-off you have to be comfortable making.
- lauradhamilton 13y agoWhy can't they develop an algorithm that distinguishes malicious pings from legitimate pings?