OMG, I’ve been hacked!
Apologies to anyone who has logged into this blog in the last few days only to find a link-farming spam page. Seems that someone has managed to pull off a script injection on this site. I’ve removed the offending code but I still have no idea how they managed it. I’m investigating…
Let us know if you learn how this hack could have been prevented. (Maybe you’re a Toyota.)
From the logs it looks like someone just came right in, logged into WordPress as administrator and changed the content of the site. I’ve no idea if they used an exploit or whether they managed to obtain my password somehow. The login was from Singapore.
There is a known bug in WordPress, AFAIK. Just look here: http://search.securityfocus.com/swsearch?sbm=%2F&metaname=alldoc&query=wordpress&x=0&y=0
Always keep wordpress updated and secured: http://wordpress.org/development/2009/09/keep-wordpress-secure/
when you figure it out. how about a refresher on how to use “netsh”