Posted on 04 February 2010. Tags: base64_decode, eval, hack, malicious code, malware, unescape, wordpress, wordpress security
Well my day ended yesterday with a shock and the whole day today was spent in getting back to normalcy. Yes, SEO-Mind.com was hacked. I am not sure how it was hacked, but a whole bunch of codes were injected in the top of each and every file in my server. That would be 6000 + !!! Yes, the number is right!
When I opened any php file, I had a code starting like below on top of the source code:
This in turn loaded a iframe, which would get added to the footer of every page and download malware to visitors local computer. On decoding the Base 64, I found that it had another encrypted code using eval(unescape in it. This created an iframe as follows:
document.write(‘‘);
Now, the problem was, “How do I remove this from the 6000 odd pages on the server? Not just wordpress, the joomla site residing on the same server location was also infected. This means, the malware code was injected into every php file on the server. It had not left a single php file uninfected.
After breaking my head on different things, finally, here is what I did:
1. Took backup of the database
2. Backup of the wp-content/upload folder
3. Downloaded the plugins folder and themes into dreamweaver and removed the malicious code using find and replace. This was around 1500 files. I had to do this because I had customized most of the plugins and themes and I hate doing that to the dozen plugins and themes that reside on my wordpress again. Infact, I have forgotten what I did as it was years earlier.
4. Install a fresh pack of WordPress
5. link the database to it [Please be aware that some WordPress users have mentioned even their database being hacked. Thank God, it did not happen to me!]
6. Drop the upload folder back to the place as its only images, its not prone to hacks or malicious code
7. Drop the cleaned plugins and themes folders to their respective locations
8. Hurray! it started working fine without the code. I am yet to clean up the other sites, but wordpress is working great and faster too!!
The next immediate step I took was to increase my WordPress Security.
Though a Hack can happen through various channels, majority of the hacks can be avoided through easy precautions. I am writing an article on how a hack like this can be avoided by following some simple procedures. I will post soon about this. Anyone who had a bad day or a week due to this hack can comment on how you solved it out!! I should be getting a peaceful sleep tonight!!
Posted in Tricks and Tweaks
Posted on 17 February 2009. Tags: blogger, hosting, wordpress
Well, both Blogger and WordPress are excellent for creating a blog with common features. Both provide great tools and moreover both are free.
The answer changes based on individual needs. Read the full story
Posted in Blogging
Posted on 17 September 2008. Tags: blog, bounce rate, reduce bounce rates, wordpress
Generally blogs have a very high bounce rates. If your blog has a bounce rate of 40% to 50% then you should be having great content. Usually, many blogs result in a bounce rate of over 80%. But there are ways to reduce your bounce rates.
What is a bounce rate?
Bounce rate is the percentage of visitors who leave your website without visiting any other page or before the specified session time.
According to Google Analysts, an accepted bounce rate would be between 20% and 50%. It also states that a bounce rate over 50% is a matter of concern.
Reason for High Bounce Rates
Blogs usually contain huge content, especially, if the blog is updated on a daily basis by more than one editor. Hence, search engines love indexing blogs. Search engines feel blogs have fresh content.
You would have noticed any information posted in your website appearing in Google’s Index in few minutes. This can result in the website ranking high even for unrelated content. If a visitor was searching for an online purchase and you had written an article about the product, the visitor might leave your site if he reaches and finds that you do not sell the product.
Similarly, many blogs have subscriptions. People who have subscribed for your articles would just read the article which interests them. Subscribers can also lead to high bounce rates.
How to decrease Bounce Rates
The best way to decrease bounce rates is make your website more interactive. This can make the visitor stay on your website.
- While writing articles, also ask for feedbacks and comments on your thoughts
- Let your articles be thought provoking and force the user to comment
- Include a “Related Post” plug-in which can list related articles by using your tags.
- Include a “Most Popular Posts” plug-in which can increase the curiosity of the reader
- Reduce external links on your site. Try to open them in a new window if possible.
- Optimize your site navigation. If you feel your template is not attractive or interactive, try using different templates until you finalize on one.
These suggestions can definitely help you decrease bounce rates. If you have any other suggestions, please feel free to post your comments.
Posted in Blogging
Posted on 03 September 2008. Tags: blog, Blogging, favicon, favicon.ico, wordpress
Wouldn’t it be great to have a favicon added to your WordPress blog? It not just looks cool it also builds a brand image. It also makes your blog visitors recognize your website as soon as they see your favicon. It is also identifiable when you bookmark it in your browser.

So said, how would you get the icon on the address box? It’s very simple.
Getting Started:
To create a favicon, you first need an image. Do you have a logo for your website? That’s what should go as the favicon. If you have not created a logo, search for a small clear image which would fit your website category .

Creating Favicon.ico file
- Goto Favicon generator
- Upload the image from your computer using the “Browse” button in the Favicon generator.
- If you wish to get an animated text gif icon, you can provide the text in “scrolling text”(Optional)
- Click “Create Favicon”
You would get a preview of favicon.ico. On the right side, you would find the option to download favicon. Click on “Get It Now!”.Save the zip file to your computer. The zip file would contain four files:
- favicon.ico
- preview_16x16.png
- preview_32x32.png
- animated_favicon.gif
The favicon.ico is what you need. Extract it to your computer and upload the file to your root folder. For example, if your website is http://www.seo-mind.com then the favicon.ico should be placed as http://www.seo-mind.com/favicon.ico Usually, this would be the “httpdocs” or “public_html” or the “www” folder.
Adding the favicon.ico file to your WordPress Blog:
Now that you have uploaded it, you would have to edit your header.php in your wordpress blog.
- Log into your WordPress admin section, choose “Presentation” and select “Theme Editor”
- Choose “header.php” from the right side links and add the below line inside the head section.
<link rel=”shortcut icon” href=”favicon.ico”>
<link rel=”icon” href=”favicon.ico”>
- Save the header.php file
Now, refresh your website by pressing Ctrl+F5 keys. You should be able to see the favicon next to your website URL.If you are still unable to see the favicon, close your website and delete temporary internet files. Try opening the website again.
Posted in Blogging
Posted on 02 September 2008. Tags: wordpress, wordpress blog, wordpress database, wordpress tips
Usually, a basic paid hosting would provide 5 – 10 databases. Some of you would have used the all the databases. If you are one of them and wish to have one more WordPress blog, then sharing the database would be a good option. This can also help better organize your database and also import, share or export user information easily
Installing more than one WordPress blog using one database is quite simple. All that you need to do is go for a manual installation. Many hosting providers now provide a “one click” install which would take care of everything. Follow the steps below to create your WordPress blog in the exisiting database.
- Download WordPress extract and upload it to the folder you wish to install.
- Open wp-config.php file and search for the $table_prefix. The default would be
$table_prefix =’seo2010_’;
- Change the prefix to a name related to your blog. If it is http://www.seo-mind.com, then change it to ‘wpseo_’ or something similar. This can help you recognize the blog tables in future.
- If you are not familiar with editing wp-config.php file, change the default seo2010_ prefix when the WordPress Configuration screen appears.
- Just proceed further till completion. That’s it! You now have two WordPress blogs running in a single database.
Posted in Tricks and Tweaks
Posted on 08 May 2008. Tags: blog benifits, blogger, Blogging, wordpress
There are a lot many reasons why blogs can be useful to your SEO efforts. Blogs and blogging have become hugely popular in recent times. With free blogging by WordPress, Blogger and other free open-source blogging applications, anyone who has little or no knowledge of coding can start a blog of his own.
Blogs give fresh content – Search engines look for blogs and forums generally for any topic of discussion. This is because search engines view blogs as a medium where fresh content can be obtained.
Easy Maintenance – Blogs are easily maintainable. They require few or no maintenance. Most blogging applications are search engine friendly. You would not have to end up spending huge time and resource in optimizing the website. You start to add content once you install the blog and choose your template. Installation would take few minutes.
Blog Growth – Blogs grow faster than any online medium. Blogs expand and interlink internally providing an excellent place for search engines to gather food.
Syndication – Blogs help syndicate your content to another website. This helps trade content which also helps external linking.
Social Media Bookmarking – Social Media websites provide huge scope for external linking. Getting your posts onto few social media websites can provide modest traffic back to your blog.
Posted in Blogging