What is a "backdoor" to WordPress and do we need one?

[purplemagpie]

I'm working with a different set-up on a site that was hacked. We couldn't get in using any of the passwords, etc.

The host (who designed the original) said he had a "Backdoor" to the site and would reset the password info.

What is that backdoor? Do Genesis sites have one? Do we need one?

What kind of "words" do I use to discuss this with clients so they feel safe?

Thanks. Inquiring minds want to know...

Maggie

[Susan]

This post might help:

http://www.wpbeginner.com/wp-tutorials/how-to-find-a-backdoor-in-a-hacked-wordpress-site-and-fix-it/

[purplemagpie]

Thanks, Susan.

But the guy acted as if a BackDoor is a GOOD thing. This article (which is good info) shows how to fix a backdoor.

Is there a backdoor type of thing that allows a person access to their site if it's been hacked?

Also here is a quote off that article:

Just FYI: if you want to be 100% sure that there is no hack, then delete your site. And restore it to the point where you know that the hack wasn’t there. This may not be an option for everyone, so you have to live on the edge.

Since I am deleting the old site (done) that was Joomla and putting up a new WP site, I take it to mean that I won't have that person's hacking secret doors to worry about?

Sheeesh!

Maggie

[Anita]

The backdoor they used was going into your MySql database and using MD5 to change the password. It's not some big secret. I do it all the time. If you ever open your MySql file up in your browser - make sure you log out also. But that's how the host is getting in.

---

Love coffee, chocolate and my Bella!

[Anita]

If you ever call tech support at a hosting company - 9 times out of 10.... they think if you are calling them - you are as dumb as a box of rocks and they will tell you anything! I've been doing this a long time. I act dumb a lot when I call so I can catch them up in their lies! It gets to be real funny sometimes.

---

Love coffee, chocolate and my Bella!

[hp]

Or they have some tools such as ManageWP, InfiniveWP, etc. but I doubt it when they leave the sites for hacking. Reseting password through phpmyadmin was what I thought too.

[Author]

Posts