> ## Content Index
> Fetch the complete content index at: https://chrisenns.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Site Was Hacked Last Night
- URL: https://chrisenns.com/2013/03/site-was-hacked-last-night/
- Published: 2013-03-19T12:00:00.000Z
- Updated: 2024-04-08T23:52:37.000Z
- Author: Chris Enns
- Tags: Uncategorized, #wp, #wp-post, #Import 2024-04-08 17:47, #ichris

https://twitter.com/claybitner/status/314033569272053760

---

My apologies if you saw a couple of posts about financial news last night on the site or via RSS - somehow a person/bot created a user account on my blog with administrator privileges and posted a couple of articles. I haven't figured out anything else they might have done but I will be [scanning the site](https://sucuri.net/?ref=chrisenns.com) throughout the day and watching for anything else odd.

The place I noticed an odd setting was under Settings -> General (/wp-admin/options-general.php on your WordPress install):

**How My Install Was Configured:**

![WordPress Settings Anyone Can Register](https://chrisenns.com/wp-content/uploads/2013/03/Screen-Shot-2013-03-19-at-9.48.40-AM.png)

**How It Should Be Configured:**

![WordPress Settings Anyone Can Register](https://chrisenns.com/wp-content/uploads/2013/03/Screen-Shot-2013-03-19-at-9.48.33-AM.png)

I don't think I set it up the way it was with anyone being able to register AND be given Administrator access - but I have had this blog running for a long time so maybe I did at one point and forgot to turn it off. Or maybe there's a backdoor somewhere in one of my plugins?

[Sucuri](https://sucuri.net/?ref=chrisenns.com) didn't turn anything up but like I said, I'll keep scanning throughout the day. Thanks to [@claybitner](https://twitter.com/claybitner/status/314033569272053760?ref=chrisenns.com) for pointing it out to me this morning.