WordPress Website Hacked and Redirected to Other Sites: Troubleshooting Methods

Many corporate websites lack dedicated security personnel and have insufficient awareness of website security. If your website is hacked and redirects to another site, how can you resolve it? Naibabiji shares basic troubleshooting methods for a hacked website here. Our websites are almost constantly harassed by malicious crawlers, but you may not notice it if you haven't been hacked. If your website is hacked, don't panic; follow the steps below to troubleshoot and resolve the issue.

Step 1: Request Help from the Hosting Provider

For example, those commonly used by foreign trade professionalsSiteGround, or Bluehost, etc., whose plans include security items like malware scanning. You can directly submit a ticket to customer service for help. If the service you purchased does not include this item, then you will have to troubleshoot it yourself.

Step 2: Check Server Files

Log in to the server and check if there are any unknown files or folders in the website directory. Usually, files with chaotic names are very suspicious. You can also judge based on the file creation time. If you haven't uploaded files to the server recently, the most recent files are highly suspicious. The most reliable method is to find an experienced technician to help you analyze. If you can't find one, you can compare with the default WordPress directory list to make a simple judgment (though you may not be able to determine which files are generated by normal plugins).In the image above, the red box indicates the WordPress core files. The wp-content folder contains folders uploaded by the website, such as Themes and Plugins. wp-config.php is the website configuration file, generated during installation.

Step 3: Reinstall WordPress

You can first back up the website, then reinstall WordPress. Note that during reinstallation, do not re-upload any files other than uploaded image files to the website server. Download Themes and Plugins from the official website before uploading them to avoid Plugins and Themes containing malicious code without your knowledge.

Step 4: Install a security plugin

At this point, the Trojan files are usually gone, but to prevent some malicious code from hiding in your Posts, we can install some security software to help you resolve it. Related article:

• WordPress Security Plugin Recommendation: Defender Security_Malware Scanning_Firewall
• Protect WordPress Website Security_Wordfence Firewall Professional Edition Download
• 6 Popular WordPress Security Plugins

After completing the above tasks, if your website is not dealing with a particularly troublesome hack, the Trojan files should have been cleared. Next, you still need to secure the server. For example, set a complex server password, upgrade the server system and components, upgrade the website version and Plugins, etc. For more on WordPress security, visitCorresponding topic。