I'm a junior web developer specialised in PHP.I know jack shit about cybersecurity.I have the unfortunate duty of taking care of an, in internet terms, ancient wordpress installation.Since I have taken control of it I'm already got infected with malware twice, the last one was a SEO injection parasiting the website's reputation to sell viagra and other dick pills.This last one was a month ago, I thought I managed to clean it and patch things up, but today it flared up again.And now it got rid of Wordfence and is giving me certificate issues.The malware seems to be relatively simple, it is a modification of wp-config.php that links to an obfuscated script located at the root of the hosting, that generates the SEO injection dynamically, I'm quite worried about the level of access that allows the hacker to have privileges that up the chainThe website is using plugins and themes, some of which are no longer mantained, some of which cannot be updated without breaking the site.I could try vibecoding a security patch for its plugins and themes but time is a limited resource and my boss wants other shit done.FFS, tell me what the fuck am I doing wrong. This shit is making me nuts.So yes, opsec level = wordpress
>>1578434>The malware seems to be relatively simple, it is a modification of wp-config.php that links to an obfuscated script located at the root of the hosting, that generates the SEO injection dynamically, I'm quite worried about the level of access that allows the hacker to have privileges that up the chainOnce the malware has worked its way in, it can be real hard to verify that you got rid of the entirety of it. Unless you are damn sure you can verify this, restore the whole site from backup to a version before the compromise. If you can't, throw the site away and build a new one.>I have the unfortunate duty of taking care of an, in internet terms, ancient wordpress installation.>The website is using plugins and themes, some of which are no longer mantained, some of which cannot be updated without breaking the site.>FFS, tell me what the fuck am I doing wrong. This shit is making me nuts.What you're doing wrong is: you are maintaining an ancient wordpress installation with plugins and themes that are no longer maintained and cannot be updated without breaking the site.There is no way to run a site like that in a way that doesn't get it compromised by dick pills malware. If it's an ancient wordpress version, it WILL get compromised and there is nothing you can do about it. You cannot fix this. The options are to rewrite the unmaintained plugins and themes from scratch and update wordpress; throw the site away and build a new one; or live with the viagra malware.I am sure this is not what your boss wants to hear, but unfortunately it's the truth.
Just ask Claude
