There was still a trace of malware somewhere so I decided to take extreme measures. I deleted all WordPress files, deleted the database, and started again with a ten day old Vaultpress backup. Everything is clean again according to scans and I’m filling in the blanks from Day One copies. Phew!

My homepage started to throw up PHP errors above the site header last night. The messages suggested it was something to do with the micropub plugin I’m using to post certain things here so I decided to login to my FTP account and investigate.

When I did this I found several folders with short names that contained a load of files with names like AA, AB, ADE, all the way up to Z. There was also an htaccess file in each folder. I looked through the files and it appears someone had broken into the account and tried to serve spam from my server.

I checked the plugin files which appeared to be okay and then checked the index.php file which was also mentioned in one of the errors. That had also been tampered with. I deleted all of the rubbish and replaced the hacked index.php and all errors disappeared.

It was all a bit disconcerting. I’m not an expert when it comes to these things and I’ve never had this happen before. I’ve no idea how it happened.

All passwords have been changed and I’ve added more security measures to my .htaccess file but I’ll need to keep an eye on things a bit better.

Going Indie. Step 2: Reclaiming Content

This article is one of the best explanations of what the Indieweb movement is all about. Incidentally it’s a movement I’ve only recently discovered and I’m not sure if I’m part of it or not.

I would love it if all of my online friends read this and took the ideas onboard but I think it’s too late for many of them. I would hate the Indieweb go the same way as Linux i.e. a better way of doing things but just not user-friendly enough to get any traction amongst everyday people. I think it has a better chance though due to the many plugins and services that can make a WordPress site, like this one, more connected.

I’ve added the Simple Location wordpress plugin and a Google Maps api key for better mapping. Since I don’t go to many places I wont be overusing this but it’s another nice addition to the site. I think, for me, location recording is purely for saving memories. I don’t need to log every single place.