All my Wordpress sites got HACKED

[cagatay]

Do all your wordpress use the same database or a different one?

All use different database and some sites has their own vesta username. I assume he got himself a shell access.

I am considering a safer paid panel solution. Using unmature panel for business is too risky for me.

What does using VestaCP have anything to do with it? You don't even know how your Wordpress sites were hacked, you assumed they got shell access well what do your logs says?

I only host wordpress sites, + all my sites has been compromised. since I am not a "linux expert" I have to find something I can rely on.

it seems using cloud linux + cage fs + cpanel + varnish on a seperate server on same network is the easiest solution for me.

when it comes to logs, I dont know where to look, what to look.

By the way I noticed when I create an account, vesta sets chmod 775 for file permissions. Is this normal, do you manually change it to 755 ? could that be what this is all about?

[Deeryo]

Hello, I have a patch. You can change access permisions to web folders:
For Centos:

Code: Select all

chgrp nginx /home/*/web/
chmod o= /home/*/web/

For Debian/Ubuntu:

Code: Select all

chgrp www-data /home/*/web/
chmod o= /home/*/web/

Also edit all web sites and select nginx template "hosting", it's more secure.

[cagatay]

thank you very much, I will use your advices.

[skurudo]

Closed.