Team Canada Wins the Gold!
Posted by Rev. Voodoo under Empire News
Archive for February, 2010
Mix of the Moment-iO
Posted by Rev. Voodoo under Mix of the Moment
It’s high time we post another mix up here on The Voodoo Empire. This is a nice Tech House mix off of Proton Radio, the Brand New Vibes show. This mix is by iO from February 9th. Enjoy! (check us out soon for the second half of this mix)
Podcast: Play in new window | Download
Join the forum discussion on this post
I sure hope I’m not speaking to soon here, but after Team Canada destroyed Russia last night, the possibility is looking quite good for a Canada/USA rematch for the Gold in Men’s hockey. And, we already have that match up in women’s hockey going on tonight! The next few days promise to be some very exciting olympic hockey watching! You know I’ll be watching the women tonight, and keeping a close eye on Friday’s games to see what happens Sunday! If the rematch happens, you know we’ll be enjoying it Sunday at 3:15pm…..you are welcome to join us!
Join the forum discussion on this post
Time to Turn On The Olympics For a Serious Hockey Game!
Posted by Rev. Voodoo under Life, Voodoo Style
Seems like more and more, I see people having a terrible time with their WordPress installs being hacked. While I’m no expert on the internets, or security, or anything like that….I did suffer through 2 rounds of attacks here on The Voodoo Empire, and recovered fully….and learned a lot. So here is the process I went through. The first time I wasn’t thorough enough, and that is how it happened again. I’ve been clean for months now, after doing things properly the second time. Before I describe my process, here are some great reads that pretty much set me straight and got me going on the cleanup process.
- http://codex.wordpress.org/FAQ_My_site_was_hacked
- http://ocaoimh.ie/did-your-wordpress-site-get-hacked/
- http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
- http://www.snipe.net/2010/01/when-wordpress-gets-hacked/
These got me going through the cleanup process, and one other good link, after you get everything cleaned up:
So that’s the required reading out of the way….now onto my process.
I first noticed some gibberesh (the base64 stuff) showing up in my theme’s files when I went in to do some editing. It had been months since I had worked on my theme, so who knows how long the spam had been in there. I deleted all the rogue code from all my theme’s files and thought I was golden. Until it showed up again, I layed the find and delete game for some time…..but it kept coming back. Then I started to dig around some more…..The Voodoo Empire has 5 WordPress installs, and at the time we had Drupal, Joomla, ZenCart, MediaWiki, and many other software packages. This totals up to a few thousand php files on the server. Each and every php file had the base64 stuff in it. So next up, every php file was either cleaned, or replaced. I thought I’d had it beat. A month later it was back. I’d developed the habit of viewing my source code from within my browser each time I visited my websites now to look for bad stuff. But this time, even though there was spam in my source code, there wasn’t any files altered. So I dug and dug, and finally found a php file that didn’t belong buried about 4 level deep. It was inserting spam links. I deleted it and thought I was good. But alas, it was too good to be true…..soon, all my php files on my server got altered again. This time though, I did some research and finally cleaned up properly.
First thing I did was change all my passwords. FTP, WP (and all other programs), all DB passwords, etc. After I changed all my passwords, I took a look at one of the files that had been altered, and checked out it’s timestamp. My host (GoDaddy) offers server access logs to peruse at my leisure (if you’ve never seen an access log, they are scary). I had no idea what was in a log, I’d never seen one, but I decided to dive in. I checked my access logs agains the times that the altered files had last been changed and found that a rogue php file buried way deep in the 2008 uploads folder of a different WP install was affecting my main WP install. Upon further investigation, I found another rogue php file that was altering my other files. So I deleted the rogue php files. I then reinstalled every single software package on my server. Then I went in and manually cleaned the rest of the php files that didn’t get replaced (WP theme files, wp-config file, etc). After that it was on to plugins. I deleted all plugins and installed from clean downloads. So now every php file on my server was accounted for, and clean. No rogue php files existed anywhere. No rogue code was added on to any of my existing php files.
It was time to finish thing up….on to the database. I manually scanned through exports of my database looking for any suspicious code that I found, and ran some basic sql queries on my existing database looking for suspicious code, and got my database all squeeky clean. And now, with everything nice and clean, I changed up all my passwords once again.
There you have it! My long and painful travel to a clean WP. Keep everything up to date, WP installs, themes, plugins, etc. Check your source code often. Maybe install some of the various security plugins that are out there (none of them stopped my attacks, but they do have a use). And if you do get hacked…..be thorough. If you are not, you are just wasting your time! Remember, server access logs can be your friend! Hopefully you can avoid being hacked, if you are reading this because it happened to you, I hope I helped you just a little, be patient, be thorough, and good luck!
Check out my post here if you are looking for more information on rogue files, and using your access logs to find them.
Join the forum discussion on this post
Just a quick little Valentine’s Day love from The Voodoo Empire to all of you! Have a nice relaxing day, maybe some nice dinner, hopefully yummy dessert, and watch you some Olympics!
Join the forum discussion on this post
Tomorrow night, Friday, February 12th is the Opening Ceremonies for the 2010 Winter Olympics in Vancouver Canada! You are welcome to stop by the house around 7pm if you’d like to join us while we watch them. Bring grub or drinks with ya if you’d like (or even a chair….). I hope I’m not speaking too soon, but we should have renovations finished in the back rooms. Unfortunately, I’m nearly certain we will not have time to furnish the rooms….since we don’t actually even own the furniture yet. Anyway, we hope to see you tomorrow!
Local Selection-Intravenous Bass
Posted by Rev. Voodoo under Local Selection
It’s been a little bit since we posted some tunes. It’s been hectic around the Empire. House renovations, snow, strange visitors from foreign lands! But here is a mix that I’ve meant to put up for a little while now. It’s a quality gem from one of Toledo’s finest! A good friend of The Voodoo Empire. It’s The Awakening from Intravenous Bass which aired on NuBreaks.com’s Electronic Enlightenment show back on December 13, 2009. The show airs every Wednesday night from 6-8 pm if you’d like to check it out. This one is a little slowed down, it’s dark, dirty and amazing. Sounds great in a little car with big speakers…..give it a go!
Podcast: Play in new window | Download
Join the forum discussion on this post
