WordPress.com

1. ttravis9
   Member
   Jul 23, 2012, 3:48 PM

   Looking at a relatively old post (http://pointsadhsblog.wordpress.com/2012/02/08/michael-jacksons-addiction-problem/) on my blog Points: the blog of the alcohol and drugs history society this morning, I saw something weird. In the editing list, the last edit was made by someone named Rick Torres, on 15 March, with the previous one made by me (blog editor) at the end of February, fixing some errors in the author's version (lxnfleck). We do not have an author or editor named Rick Torres, and the author confirms she was not logged in via someone else's account. there seem to have been no changes to the post, but we are concerned about a security breach and wonder if you can look into it?

   To further complicate matters, the post "autosaved" at the time I was looking at it this morning, and then the when the author went back to check for accuracy she re-saved an old version. Now the "rick torres" save has disappeared.

   Can you look at our blog from your end and see what is happening? Thanks.
   Blog url: http://pointsadhsblog.wordpress.com/

2. timethief
   Member
   Jul 23, 2012, 3:52 PM

   Edit that and do not delete it. Make it private so Staff can examine it.

   1. Go here > Users > All Users and delete any user that does not belong there.

   2. Disable post by email > http://en.support.wordpress.com/post-by-email/

   3. Disable post by voice http://en.support.wordpress.com/post-by-voice/

   4. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password

   5. Go to your email program and change the password to a very difficult one

   6. Then note ansd act on the security tips here > http://en.support.wordpress.com/security/

   I have flagged this thread for Staff attention.

3. ttravis9
   Member
   Jul 23, 2012, 3:53 PM

   When you say "edit that" what do you mean?

4. 1tess
   Moderator
   Jul 23, 2012, 4:14 PM

   make it private

5. timethief
   Member
   Jul 23, 2012, 4:19 PM

   @ttravis9
   See here > http://en.support.wordpress.com/posts/post-visibility/

   Please note that if you have used the same password on your blog that you use anywhere else online then you must get rid of the practice at once. It makes every account you have vulnerable to hacking. You must have unique ie. different and very strong passwords for every account you have online if you want to have secure sites.

   If you have official users on your blog then be sure that you are the only Admin and pass the information I posted above and here in this thread every one of your official users. http://onecoolsitebloggingtips.com/2012/07/22/how-to-prevent-and-react-to-a-wordpress-hack-attack/

Topic Closed

This topic has been closed to new replies.