Search code examples
phpwordpress.htaccessxsscode-injection

Wordpress attack regarding .htaccess file


I get an Internal server error when I try to access my site. Server is actually working fine, I have access like usual in the ftp mode. For some reason I am being attacked, likely an XSS attack, that affects my .htaccess file making it look like that: lots of ##:

enter image description here

which results to a gigantic length of that line, making the server rendering it as a length overflow and not dipsplaying the site. When I try to modify that file, it has changed the permissions, so i first need to change them and then modify it. After I have deleted all the "#" site works fine. After some time, the same thing happens.

I have the latest wordpress installation, and have also installed wordfence. How can I stop this?

EDIT: Server admin says it hasn't to do with the server, because there are other wordpress sites with no problem.


Solution

  • After changing the FTP password, there are no more unwanted file edits, thus no more overflow server issues.