Skip to content

create compromised wordpress site docs#49

Merged
skybound0532 merged 5 commits intoocf:mainfrom
skybound0532:main
Mar 4, 2026
Merged

create compromised wordpress site docs#49
skybound0532 merged 5 commits intoocf:mainfrom
skybound0532:main

Conversation

@skybound0532
Copy link
Contributor

instructions on fixing compromised sites for both userdocs and staffdocs

Copy link
Contributor

@BNH440 BNH440 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good overall, check comments
(I would fix some of these things if I could but working with a fork is annoying)

restore-wpbackup target-username staff-username

as root/with `sudo`. Select a backup using best judgement. It is usually best to check for when files were last changed to estimate a compromise date.
4. Delete their `public_html` directory.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably be updated to specify to delete the contents, as the directory itself is a symlink and it might be bad to remove the dir itself

ex: something like rm -rf public_html/* would be the correct command

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed, changed the wording


as root/with `sudo`. Select a backup using best judgement. It is usually best to check for when files were last changed to estimate a compromise date.
4. Delete their `public_html` directory.
5. Rename the backed-up directory to `public_html` with `mv public_html_backup /* public_html`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Typo in command, make sure the '/*' is next to public_html_backup

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed oops

Copy link
Member

@jaysa68 jaysa68 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

wooowwww

@skybound0532 skybound0532 merged commit f796228 into ocf:main Mar 4, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants