<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.2.3" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
<channel>
	<title>Comments on: WordPress Has Been Hacked:  Are You Protected?</title>
	<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html</link>
	<description>Canada's Search and Social Media Authority</description>
	<pubDate>Sun, 07 Sep 2008 15:31:36 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.2.3</generator>

	<item>
		<title>By: chineseguy</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-3235</link>
		<dc:creator>chineseguy</dc:creator>
		<pubDate>Tue, 26 Aug 2008 09:01:04 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-3235</guid>
		<description>suffered twice) - I believe wordpress is trying to fix the bugs and holes continuesly, but still you have to be careful, change your passwords frequently, make it hard to guess, get a good hosting company, besides try to make backups frequently.</description>
		<content:encoded><![CDATA[<p>suffered twice) - I believe wordpress is trying to fix the bugs and holes continuesly, but still you have to be careful, change your passwords frequently, make it hard to guess, get a good hosting company, besides try to make backups frequently.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ECOMMERCE - Bloggers Digest - 4/25/08</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-2182</link>
		<dc:creator>ECOMMERCE - Bloggers Digest - 4/25/08</dc:creator>
		<pubDate>Thu, 19 Jun 2008 20:54:43 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-2182</guid>
		<description>[...] suffered twice) - here are two great articles on how to avoid being hacked and how to recover, from Search Engine People and Daily Blog [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] suffered twice) - here are two great articles on how to avoid being hacked and how to recover, from Search Engine People and Daily Blog [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bonfide</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1963</link>
		<dc:creator>bonfide</dc:creator>
		<pubDate>Fri, 06 Jun 2008 21:33:03 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1963</guid>
		<description>In the process of getting back up from a hack that inserted the code.. I'm re-installing a current version of WP and then reloading a copy of my database and tweaking it on an air gapped local box.  Then it will go back up and I'll petition Google for a clean review.

God help the hacker if I ever found him/her....</description>
		<content:encoded><![CDATA[<p>In the process of getting back up from a hack that inserted the code.. I&#8217;m re-installing a current version of WP and then reloading a copy of my database and tweaking it on an air gapped local box.  Then it will go back up and I&#8217;ll petition Google for a clean review.</p>
<p>God help the hacker if I ever found him/her&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: GhostHoster</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1800</link>
		<dc:creator>GhostHoster</dc:creator>
		<pubDate>Mon, 26 May 2008 13:42:24 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1800</guid>
		<description>I think hacking wordpress is very easy compared to any other things !!!
really ,
Look 
most of the Wordpress blogs have Admin as username and u just need to find the password.
Just try few combinations with blog auther name or blog name 

simple :)</description>
		<content:encoded><![CDATA[<p>I think hacking wordpress is very easy compared to any other things !!!<br />
really ,<br />
Look<br />
most of the Wordpress blogs have Admin as username and u just need to find the password.<br />
Just try few combinations with blog auther name or blog name </p>
<p>simple <img src='http://www.searchenginepeople.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Matt Ridout</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1559</link>
		<dc:creator>Matt Ridout</dc:creator>
		<pubDate>Mon, 28 Apr 2008 09:21:07 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1559</guid>
		<description>Really informative post about wordpress - I will have to keep my eyes open!</description>
		<content:encoded><![CDATA[<p>Really informative post about wordpress - I will have to keep my eyes open!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Utah SEO</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1577</link>
		<dc:creator>Utah SEO</dc:creator>
		<pubDate>Sun, 27 Apr 2008 02:50:58 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1577</guid>
		<description>Man I hate those damn iFrame hacks.</description>
		<content:encoded><![CDATA[<p>Man I hate those damn iFrame hacks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Marc</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1560</link>
		<dc:creator>Marc</dc:creator>
		<pubDate>Sun, 27 Apr 2008 02:39:09 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1560</guid>
		<description>one of my wordpress sites was hacked a month ago and they used it to send out spam for a few hours before i shut them out.  my host thinks it was because i was still using  a slightly old version of wordpress

so we also have to be on the lookout for files installed which can send out email and can bypass the servers normal email procotols and safegaurds

im still a big supporter of wordpress though</description>
		<content:encoded><![CDATA[<p>one of my wordpress sites was hacked a month ago and they used it to send out spam for a few hours before i shut them out.  my host thinks it was because i was still using  a slightly old version of wordpress</p>
<p>so we also have to be on the lookout for files installed which can send out email and can bypass the servers normal email procotols and safegaurds</p>
<p>im still a big supporter of wordpress though</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Partnervermittlung Ukraine</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1561</link>
		<dc:creator>Partnervermittlung Ukraine</dc:creator>
		<pubDate>Sat, 26 Apr 2008 09:58:51 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1561</guid>
		<description>Very helpful - but I'd rather suggest to subscribe to the &lt;a href="http://wordpress.org/development/" rel="nofollow"&gt;WordPress Development blog&lt;/a&gt; to get notifications for urgent security updates than update on a monthly schedule.

A monthly schedule might leave your blog vulnerable for as much as 30 days if you happen to miss a fix by just one day. That's an eternity for hacker to target your site.</description>
		<content:encoded><![CDATA[<p>Very helpful - but I&#8217;d rather suggest to subscribe to the <a href="http://wordpress.org/development/">WordPress Development blog</a> to get notifications for urgent security updates than update on a monthly schedule.</p>
<p>A monthly schedule might leave your blog vulnerable for as much as 30 days if you happen to miss a fix by just one day. That&#8217;s an eternity for hacker to target your site.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WordPress 2.5.1 released &#171; Opposable Thumbz?</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1564</link>
		<dc:creator>WordPress 2.5.1 released &#171; Opposable Thumbz?</dc:creator>
		<pubDate>Sat, 26 Apr 2008 05:57:10 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1564</guid>
		<description>[...] was talk about a WordPress security vulnerability over at Search Engine People, but I don&#8217;t know if this is the same as the one that was fixed or [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] was talk about a WordPress security vulnerability over at Search Engine People, but I don&#8217;t know if this is the same as the one that was fixed or [&#8230;]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TheWis</title>
		<link>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1576</link>
		<dc:creator>TheWis</dc:creator>
		<pubDate>Fri, 25 Apr 2008 22:28:50 +0000</pubDate>
		<guid>http://www.searchenginepeople.com/blog/wordpress-has-been-hacked-are-you-protected.html#comment-1576</guid>
		<description>@Make Money Blogging
Here is a list of the emails that will get a copy of Google's malware notification:
abuse@domain.com, admin@domain.com, administrator@domain.com, contact@domain.com, info@domain.com, postmaster@domain.com, support@domain.com, webmaster@domain.com

The message will start like this:

Dear site owner or webmaster of domain.com,

We recently discovered that some of your pages can cause users to be
infected with malicious software. We have begun showing a warning page
to users who visit these pages by clicking a search result on
 Google.com.
Below is an example URL on your site which can cause users to be
infected (space inserted to prevent accidental clicking in case your
mail client auto-links URLs):</description>
		<content:encoded><![CDATA[<p>@Make Money Blogging<br />
Here is a list of the emails that will get a copy of Google&#8217;s malware notification:<br />
<a href="mailto:abuse@domain.com">abuse@domain.com</a>, <a href="mailto:admin@domain.com">admin@domain.com</a>, <a href="mailto:administrator@domain.com">administrator@domain.com</a>, <a href="mailto:contact@domain.com">contact@domain.com</a>, <a href="mailto:info@domain.com">info@domain.com</a>, <a href="mailto:postmaster@domain.com">postmaster@domain.com</a>, <a href="mailto:support@domain.com">support@domain.com</a>, <a href="mailto:webmaster@domain.com">webmaster@domain.com</a></p>
<p>The message will start like this:</p>
<p>Dear site owner or webmaster of domain.com,</p>
<p>We recently discovered that some of your pages can cause users to be<br />
infected with malicious software. We have begun showing a warning page<br />
to users who visit these pages by clicking a search result on<br />
 Google.com.<br />
Below is an example URL on your site which can cause users to be<br />
infected (space inserted to prevent accidental clicking in case your<br />
mail client auto-links URLs):</p>
]]></content:encoded>
	</item>
</channel>
</rss>
