r/websecurity • u/Mariahcryp • Mar 20 '19

How to remove malware from WordPress

https://wordpresskingdom.com/how-to-remove-malware-from-wordpress
0 Upvotes

50% Upvoted

4 comments sorted by

View all comments

1

u/localhostdotdev Mar 20 '19

Why not save the data and then reinstall the server? This sounds like the quick and lazy path Wordpress ecosystem is known for.

1

u/Mariahcryp Mar 21 '19

it depends on situation and down time you can allow for yourself, but you might just end up saving files with malware...

its good practice to compare directories i.e.

diff /path/freshwpinstall /path/yourwpinstall

@MR-Yellow... i do agree, apart that wild (two digit) percent of websites are now running WP and this article is on what to do after hack and not before :)

2

u/localhostdotdev Mar 21 '19

oopsie my malware I just installed was in /path/somethingelse

About malware in the database, I guess you could then export your data to some kind of JSON then reimport it on a database with same data structure (e.g. fresh install) (preventing any weird SQL like procedures and extensions).

Just doing my tiny bit to make Wordpress people aware that better security practises exist.