Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : my wordpress blog ask for pasword

[xmlxp]

i have no idea why my blog suddenly showing password login for public as shown in the attachment, what could cause that?

[JFSG]

Which part of WordPress is it from? The template?

[aroel]

where is it? on your home page?

[xmlxp]

yes on my homepage, thats really weired

[Hillockhosting]

have you set any plugin for protection ?

[xmlxp]

Originally Posted by Hillockhosting

have you set any plugin for protection ?

yes AskApache Password Protect plugin few days ago but it was the defult installation, didnt change any settings.

even the wordpress admin control panel page show the same thing

[aroel]

Originally Posted by xmlxp

yes AskApache Password Protect plugin few days ago but it was the defult installation, didnt change any settings.

even the wordpress admin control panel page show the same thing

that's it...rename or delete the plugins from cpanel, and try logging into wp-admin page

[xmlxp]

Originally Posted by aroel

that's it...rename or delete the plugins from cpanel, and try logging into wp-admin page

i remamed the plugin from FTP but still the same problem, is it possible the plugin edited the .htaccess file for some reason?

[aroel]

Originally Posted by xmlxp

i remamed the plugin from FTP but still the same problem, is it possible the plugin edited the .htaccess file for some reason?

yeah, it could be, however i've never used that plugin. why don't you see the .htaccess and find any .htpasswd on your hosting, then rename it

[xmlxp]

this is .htaccess file content:

Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .ps
AddHandler cgi-script .ps	
AddHandler cgi-script .ps

[xmlxp]

here is the content of the index.php which is suppose to be the homepage of the wordpress (correct me if am wrong here):

<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define('WP_USE_THEMES', true);

/** Loads the WordPress Environment and Template */
require('./wp-blog-header.php');
?>

[MGarden]

Originally Posted by xmlxp

here is the content of the index.php which is suppose to be the homepage of the wordpress (correct me if am wrong here):

<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define('WP_USE_THEMES', true);

/** Loads the WordPress Environment and Template */
require('./wp-blog-header.php');
?>

Yes, this is a "homepage of the wordpress" as you said - main file executed on every page load in your WordPress. However, It does not says anything because every wordpress index.php looks like this one. I don't think that the plugin have changed some main files.

Does your admin panel works? Is there any more plugins installed? This is really weird.

[xmlxp]

Originally Posted by MGarden

Yes, this is a "homepage of the wordpress" as you said - main file executed on every page load in your WordPress. However, It does not says anything because every wordpress index.php looks like this one. I don't think that the plugin have changed some main files.

Does your admin panel works? Is there any more plugins installed? This is really weird.

i even renamed the plugin directory to prevent any connection with all plugins inside it, but still the same problem.

same problem also for admin login control panel. am i hacked?

[ModelWebHost]

Seems that your are hacked because there is nothing suspicious in index.php and also in .htaccess. So, if you have a recent backup, try to restore that and secure things again.