Martin Paul Eve bio photo

Martin Paul Eve

Professor of Literature, Technology and Publishing at Birkbeck, University of London and Technical Lead of Knowledge Commons at MESH Research, Michigan State University

Email (BBK) Email (MSU) Email (Personal) Books Bluesky Github Stackoverflow KC Works Institutional Repo Hypothes.is ORCID ID  ORCID iD Wikipedia Pictures for Re-Use

Wordpress php eval attacks

Cite as: Martin Paul Eve, "Wordpress php eval attacks", https://eve.gd, , https://doi.org/10.59348/4wvv5-fe614.

Sigh. More hacking attempts and seems someone did manage to inject a php eval attack into one of my Wordpress installs.

It’s not a silver bullet magic fix, because the database and filesystems can also be compromised, but for those who’d like a quick shell command to clean this type of attack from the PHP files, at least:

find ./ -name '*.php' -type f -exec sed -i -e '/php eval/ { d; }' {} \;