<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Wordpress Uprades</title>
	<atom:link href="http://www.revivalblog.com/wordpress-uprades/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.revivalblog.com/wordpress-uprades/</link>
	<description>Didn't our hearts burn within us?</description>
	<pubDate>Sun, 07 Sep 2008 07:49:47 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.1</generator>
		<item>
		<title>By: Michael G. Davis</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21888</link>
		<dc:creator>Michael G. Davis</dc:creator>
		<pubDate>Tue, 06 May 2008 21:50:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21888</guid>
		<description>Carl,

I have spent several hours every day in the last couple weeks reading the Wordpress forums for clues to some of my own problems. Even started a couple of threads.

There is quite a few out there who believe that the 'register' has been one of the access points that Russian and Chinese hackers have used to gain access to the WP admin panel. Somehow from there they hack into comments, posts, and even the database.

Some who have thought they turned off the 'register' access have later found that Russian spam bots have found a way in and registered anyway.

After reading about this over the weekend, I check to see who was registered to my main blog and found over a dozen recent registrations from .ru that I wasn't even aware of.  

I had originally read some speculation about this a a blog that specializes in Wordpress, don't remember which one. Then I searched on the Wp forums for anything on 'Register'. 

Michael</description>
		<content:encoded><![CDATA[<p>Carl,</p>
<p>I have spent several hours every day in the last couple weeks reading the Wordpress forums for clues to some of my own problems. Even started a couple of threads.</p>
<p>There is quite a few out there who believe that the &#8216;register&#8217; has been one of the access points that Russian and Chinese hackers have used to gain access to the WP admin panel. Somehow from there they hack into comments, posts, and even the database.</p>
<p>Some who have thought they turned off the &#8216;register&#8217; access have later found that Russian spam bots have found a way in and registered anyway.</p>
<p>After reading about this over the weekend, I check to see who was registered to my main blog and found over a dozen recent registrations from .ru that I wasn&#8217;t even aware of.  </p>
<p>I had originally read some speculation about this a a blog that specializes in Wordpress, don&#8217;t remember which one. Then I searched on the Wp forums for anything on &#8216;Register&#8217;. </p>
<p>Michael</p>
<link rel="stylesheet" type="text/css" href="http://www.revivalblog.com/wp-content/plugins/tippy/dom_tooltip.css" media="screen" /><script type="text/javascript" src="http://www.revivalblog.com/wp-content/plugins/tippy/dom_tooltip.js"></script>]]></content:encoded>
	</item>
	<item>
		<title>By: carl</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21887</link>
		<dc:creator>carl</dc:creator>
		<pubDate>Tue, 06 May 2008 18:33:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21887</guid>
		<description>How did you find out about this problem?  What was the indicator?</description>
		<content:encoded><![CDATA[<p>How did you find out about this problem?  What was the indicator?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael G. Davis</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21884</link>
		<dc:creator>Michael G. Davis</dc:creator>
		<pubDate>Tue, 06 May 2008 13:41:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21884</guid>
		<description>Thanks Carl,

the phpmyadmin is part of the problem. I have lost control of it and can't use it to make the changes. The host tech can't even go through their supposed backdoor and reset.

Fortunately they have not accessed and changed any posts. Most of the junk is in the database where they have created new files and used my MySql as storage and probably link to it somehow.

I have had more than a dozen 'register' to my blog from Russia and most of the junk seems to come from there or China. I think they gained access somehow through the admin panel using registration code. Not sure how or whether the 2.5.1 upgrade will even deal with it.

Michael</description>
		<content:encoded><![CDATA[<p>Thanks Carl,</p>
<p>the phpmyadmin is part of the problem. I have lost control of it and can&#8217;t use it to make the changes. The host tech can&#8217;t even go through their supposed backdoor and reset.</p>
<p>Fortunately they have not accessed and changed any posts. Most of the junk is in the database where they have created new files and used my MySql as storage and probably link to it somehow.</p>
<p>I have had more than a dozen &#8216;register&#8217; to my blog from Russia and most of the junk seems to come from there or China. I think they gained access somehow through the admin panel using registration code. Not sure how or whether the 2.5.1 upgrade will even deal with it.</p>
<p>Michael</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: carl</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21883</link>
		<dc:creator>carl</dc:creator>
		<pubDate>Tue, 06 May 2008 12:04:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21883</guid>
		<description>You can change the password for your wordpress database through the phpmyadmin.  I can show you how.  

Also, did they alter the posts or just the wordpress themes?  If you export the posts through the rss feed, you could save the posts without the comments and whatnot.</description>
		<content:encoded><![CDATA[<p>You can change the password for your wordpress database through the phpmyadmin.  I can show you how.  </p>
<p>Also, did they alter the posts or just the wordpress themes?  If you export the posts through the rss feed, you could save the posts without the comments and whatnot.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael G. Davis</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21882</link>
		<dc:creator>Michael G. Davis</dc:creator>
		<pubDate>Tue, 06 May 2008 03:09:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21882</guid>
		<description>Great article Carl. However I read it a little late. 

After I read this 4 weeks ago I checked out my own 9 blogs and found that my database of my main blog was full of junk and the root password had been changed by the hacker so that neither my host nor myself could erase the spam. I have been trying to get control ever since.

I found over a hundred pages of links on the footer of one of my blogs even after I upgraded to 2.5.1 and took me 1/2 hour to delete it all from a site that I still sort of control.

This week I am probably going delete all of my data bases and start over and rebuild my blogs from ground up with upgraded database programs and 2.5.1 Wordpress. 

None of the host techs can give me any alternatives and I have spent hours upon hours in the last 4 weeks studying MySql books and methods to no avail. 

What a nightmare.

Michael</description>
		<content:encoded><![CDATA[<p>Great article Carl. However I read it a little late. </p>
<p>After I read this 4 weeks ago I checked out my own 9 blogs and found that my database of my main blog was full of junk and the root password had been changed by the hacker so that neither my host nor myself could erase the spam. I have been trying to get control ever since.</p>
<p>I found over a hundred pages of links on the footer of one of my blogs even after I upgraded to 2.5.1 and took me 1/2 hour to delete it all from a site that I still sort of control.</p>
<p>This week I am probably going delete all of my data bases and start over and rebuild my blogs from ground up with upgraded database programs and 2.5.1 Wordpress. </p>
<p>None of the host techs can give me any alternatives and I have spent hours upon hours in the last 4 weeks studying MySql books and methods to no avail. </p>
<p>What a nightmare.</p>
<p>Michael</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Amanda</title>
		<link>http://www.revivalblog.com/wordpress-uprades/#comment-21828</link>
		<dc:creator>Amanda</dc:creator>
		<pubDate>Sun, 06 Apr 2008 17:55:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.revivalblog.com/?p=615#comment-21828</guid>
		<description>Thank you for sharing this tip!! :)</description>
		<content:encoded><![CDATA[<p>Thank you for sharing this tip!! <img src='http://www.revivalblog.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
</channel>
</rss>
