what the hells happened to my website?

what the hells happened to my website?

Author
Discussion

bitchstewie

51,371 posts

211 months

Friday 23rd February 2018
quotequote all
A lot of hosting platforms make keeping WordPress up to date pretty straightforward.

Don't get me wrong I'm not a fan of WordPress but if you're running a business you can get WordPress from a good managed host for a tenner a month who will ensure it's kept up to date.

Problems come when people try and roll their own on the cheap and forget about it.

(general comment not aimed at the OP as we have no idea what they were told by their host)

jammy-git

29,778 posts

213 months

Friday 23rd February 2018
quotequote all
4x4Tyke said:
... and the dangers of listening to the amateurs here

https://nakedsecurity.sophos.com/2013/09/27/how-to...
You're quoting a 4.5 year old article...

LDN

8,911 posts

204 months

Friday 23rd February 2018
quotequote all
When you install Wordpress - first port of call EVERY TIME, is to install a plugin called ‘Wordfence’.

It’ll stop attacks, attempted logins; the whole nine. I have quite a few Wordpress sites and Wordfence works a dream on all of them. It emails you attempted attacks, where they came from, etc etc.

Another big tip. For your admin username; always use a random word; never use ‘admin’ or the like.

In your situ; I’d wipe it all and start again. The reason the page never showed for you; sounds like it was simply the menu needed the page adding to that, perhaps.

jammy-git

29,778 posts

213 months

Friday 23rd February 2018
quotequote all
I'm surprised WordPress haven't built in functionality similar to Wordfence by now. As you say, it's an essential plugin to have and if you have that and keep plugins and WP up-to-date I'd be very surprised if you get hacked.

dmsims

6,537 posts

268 months

Friday 23rd February 2018
quotequote all
Shield is another good security plugin

4x4Tyke

6,506 posts

133 months

Friday 23rd February 2018
quotequote all
jammy-git said:
4x4Tyke said:
... and the dangers of listening to the amateurs here

https://nakedsecurity.sophos.com/2013/09/27/how-to...
You're quoting a 4.5 year old article...
So it was obsolete a long time ago. The fact is professional web developers do not use toy tools like wordpress. We use modern responsive frameworks which are complete over kill for the OPs requirements.

Choosing an appropriate technology is what differentiates the professionals, instead of using wordpress like a hammer for all jobs. Unless you can keep up with the patches to the core and every plugin on zero-day basis, wordpress is just asking for trouble.

His experience here and the level of his knowledge shows he needs a straight forward & low risk solution.

4x4Tyke

6,506 posts

133 months

Friday 23rd February 2018
quotequote all
Technology trends of web developers.

https://stackoverflow.blog/2017/03/09/developer-hi...


m3jappa

Original Poster:

6,435 posts

219 months

Friday 23rd February 2018
quotequote all
And this is where i don't understand wtf people are talking about hehe

It is a problem to not understand, it leaves me open to all sorts of issues. Show me most things and ill get it but websites and computer type stuff is something i have never understood, i suppose its the same as when i look at a job, describe it in great detail and the person stands there open mouthed as if i have just said I'm going to burn their house down and smoke the loft insulation after hehe

I am a tradesman. I will explain it how i see it.

I opted for a certain company to build me a website, iirc it was from recommendation. They did what i think was a good job, i have received lots of compliments about the site.

As time went on, i moved house and my address changed, i became ltd. I also spotted some spelling and grammar mistakes. I asked several times for this to be sorted but to no avail.
I wanted to be able to log on and update stuff. In my mind i envisioned it being like uploading pictures and text to a platform which may look like the post I'm making now.
That never happened and as such i wanted to address this. i asked a local company who have been nothing but helpful in the past with computer issues to take over the running of the website. Which they did. And then went on to say they don't deal with wordpress, would i basically like a new site......

I then messed around for several hours, updated my galleries, sorted the spelling and address etc and thought it was ok. Obviously not.

For several years the site has been fine. The hack happened the day after i updated things and about a week after new company is on the scene, so maybe i have done something, maybe they don't have the knowledge of protection that the old place did, i did do a few updates when prompted. I don't know whats happened. I hadn't even heard of wordpress until they told me they don't do it.

I spoke to them today and they do have a back up of the site so making a new one should be straightforward.

The thing is i get bombarded with sales calls from sloppy rude and ill prepared internet seo 'specialists' who i ignore. They spout bullst i don't understand which frustrates me.

I just want to be able to log on to it, update it and thats it. I have been told that to come up high in the listings i need to update frequently. having a Facebook feed on my homepage would do this (so I'm told). Which would be great as Facebook takes seconds to update from my phone.
I have been told that all the old seo stuff such as inserting words like 'driveways essex' no longer works.

So you see ill build you a lovely drive or garden but haven't a fking clue how the internet works hehe

Edited by m3jappa on Friday 23 February 20:31

LDN

8,911 posts

204 months

Friday 23rd February 2018
quotequote all
m3jappa said:
And this is where i don't understand wtf people are talking about hehe

It is a problem to not understand, it leaves me open to all sorts of issues. Show me most things and ill get it but websites and computer type stuff is something i have never understood, i suppose its the same as when i look at a job, describe it in great detail and the person stands there open mouthed as if i have just said I'm going to burn their house down and smoke the loft insulation after hehe

I am a tradesman. I will explain it how i see it.

I opted for a certain company to build me a website, iirc it was from recommendation. They did what i think was a good job, i have received lots of compliments about the site.

As time went on, i moved house and my address changed, i became ltd. I also spotted some spelling and grammar mistakes. I asked several times for this to be sorted but to no avail.
I wanted to be able to log on and update stuff. In my mind i envisioned it being like uploading pictures and text to a platform which may look like the post I'm making now.
That never happened and as such i wanted to address this. i asked a local company who have been nothing but helpful in the past with computer issues to take over the running of the website. Which they did. And then went on to say they don't deal with wordpress, would i basically like a new site......

I then messed around for several hours, updated my galleries, sorted the spelling and address etc and thought it was ok. Obviously not.

For several years the site has been fine. The hack happened the day after i updated things and about a week after new company is on the scene, so maybe i have done something, maybe they don't have the knowledge of protection that the old place did, i did do a few updates when prompted. I don't know whats happened. I hadn't even heard of wordpress until they told me they don't do it.

I spoke to them today and they do have a back up of the site so making a new one should be straightforward.

The thing is i get bombarded with sales calls from sloppy rude and ill prepared internet seo 'specialists' who i ignore. They spout bullst i don't understand which frustrates me.

I just want to be able to log on to it, update it and thats it. I have been told that to come up high in the listings i need to update frequently. having a Facebook feed on my homepage would do this (so I'm told). Which would be great as Facebook takes seconds to update from my phone.
I have been told that all the old seo stuff such as inserting words like 'driveways essex' no longer works.

So you see ill build you a lovely drive or garden but haven't a fking clue how the internet works hehe
I
Edited by m3jappa on Friday 23 February 20:31
I do feel for you... it’s stuff that I learnt on the go out of necessity. Not sure I ever set out to learn about it all.

Wordpress with Wordfence is great for your requirements. Ask this other co. to install Wordfence. It takes all of 2 minutes, so don’t let them fleece you.

jammy-git

29,778 posts

213 months

Friday 23rd February 2018
quotequote all
4x4Tyke said:
So it was obsolete a long time ago. The fact is professional web developers do not use toy tools like wordpress. We use modern responsive frameworks which are complete over kill for the OPs requirements.

Choosing an appropriate technology is what differentiates the professionals, instead of using wordpress like a hammer for all jobs. Unless you can keep up with the patches to the core and every plugin on zero-day basis, wordpress is just asking for trouble.

His experience here and the level of his knowledge shows he needs a straight forward & low risk solution.
Your argument seems to be very scattered.

WordPress is clearly not obsolete. It's perfect for the OP's requirements as others have said and it's perfect for SMEs who just need a basic CMS system with maybe some basic additional functionality.

I agree with you though - like Excel - it gets used in every conceivable situation where devs, designers and agencies just use it because it's all they know. Which is wrong. But to say professionals don't use it its patently just wrong.

As others have said, install Wordfence, keep the plugins and core up-to-date very few weeks and you won't have any issues with WP.

4x4Tyke

6,506 posts

133 months

Friday 23rd February 2018
quotequote all
Yep, sorry I tried to keep it straight forward, but unfortunately go suckered into the technical to put the amateurs know alls in their place.

Wordpress is what is known as a content management system, that describes it purposes, to help you manage the content of your site, your articles, blogs, images etc. A decade ago it was a fair solution. However time and technology has moved on, the wordpress core became bloated with feature creep and plugins to provide a modern user interface, social media integration etc. Each of those plugins increase the work load and risk in looking after the site. There are plenty of alternatives (Joomla & Drupal for example) but on the whole, the comprehensive ones suffer the same legacy risks and limitations. That is why they all need security and extension plugins, which need to be kept up to date to remain secure.

You could follow the advice above and do it yourself with Wordpress or a competitor product, however given your comments above which I agree with; you are trades/businessman, you should be concentrating on that not IT. I'll continue to rule out wordpress.

Broadly speaking you have a few options, but they are mostly variations of the outsourcing the initial work.

Go back to the company you trust, give them a broad expression of your requirements, focus on your business needs, not technology sparkle. What you've posted above fleshed out with more detail and let them propose a solution. Include the requirement that it must be simple to use so that you can update the content. It could be they are geared towards IT support rather than website development and may not want that work, if so then find a local web development agency.

To give an examples of the simplest solution take a look at these, these are templates for modern HTML5 responsive web sites. Responsive means they will work well with a range of different client devices from phones, tablets and PCs.

https://html5up.net/

There are plenty of other collections with similar features, search "Responsive WebSite templates".

These are simple to use, copy a template for a content page, paste in your text and upload the file to your host. Some template providers will take your existing content and customise one of their templates for you for very modes sums. Then all you need to do is upload the site.

These are much more secure because they much simpler and operate almost entirely on the client device. They have no need for things like wordpress or PHP the programming language used by most CMS. A few use node, angular on the server but to play safe avoid those for the same reasons you should avoid wordpress, simplicity and security.




4x4Tyke

6,506 posts

133 months

Friday 23rd February 2018
quotequote all
jammy-git said:
WordPress is clearly not obsolete. It's perfect for the OP's requirements as others have said and it's perfect for SMEs who just need a basic CMS system with maybe some basic additional functionality.
I would say his experience proves it is far from perfect for his requirements.

As to obsolete, if you look at technology trends link, or google your own, you will see wordpress is showing a heavy decline in favour of powerful and well architectures multi-tier solutions. Those are equally ill suited for the OP for the same reasons. They are over kill for his requirements, even though they are vastly superior to wordpress.

If the somebody wants to tinker, then fine, go with wordpress and explore all the plugins, but he doesn't.

durbster

10,284 posts

223 months

Friday 23rd February 2018
quotequote all
m3jappa said:
And this is where i don't understand wtf people are talking about hehe
Well, you shouldn't need to know any of it. Unfortunately somebody's decided to use your thread to try and prove how great they are for some reason. Sorry about that - developer snobs are embarrassing. nerd

If you find a good agency or developer you should just give them your requirements and they'll make the decisions for you.

I would suggest you find a website that does what you want yours to do, then ask somebody to build something similar for you. That helps give the developer clear idea of what you want. Then you also need them to know which bits you want to be able to update.

Also find out about maintenance costs which are often overlooked. If they do go with a CMS like Wordpress (which would be fine), you should allow an ongoing budget for keeping it up to date but you should think of any websites like a garden; a bit of attention every now and again does the world of good.

TooLateForAName

4,754 posts

185 months

Friday 23rd February 2018
quotequote all
4x4Tyke said:
... and the dangers of listening to the amateurs here

https://nakedsecurity.sophos.com/2013/09/27/how-to...
You seriously think that an article from 2013 is at all relevant?

durbster

10,284 posts

223 months

Friday 23rd February 2018
quotequote all
TooLateForAName said:
4x4Tyke said:
... and the dangers of listening to the amateurs here

https://nakedsecurity.sophos.com/2013/09/27/how-to...
You seriously think that an article from 2013 is at all relevant?
Steady on - don't question the professional. hehe

Efbe

9,251 posts

167 months

Friday 23rd February 2018
quotequote all
m3jappa said:
And this is where i don't understand wtf people are talking about hehe

It is a problem to not understand, it leaves me open to all sorts of issues. Show me most things and ill get it but websites and computer type stuff is something i have never understood, i suppose its the same as when i look at a job, describe it in great detail and the person stands there open mouthed as if i have just said I'm going to burn their house down and smoke the loft insulation after hehe

I am a tradesman. I will explain it how i see it.

I opted for a certain company to build me a website, iirc it was from recommendation. They did what i think was a good job, i have received lots of compliments about the site.

As time went on, i moved house and my address changed, i became ltd. I also spotted some spelling and grammar mistakes. I asked several times for this to be sorted but to no avail.
I wanted to be able to log on and update stuff. In my mind i envisioned it being like uploading pictures and text to a platform which may look like the post I'm making now.
That never happened and as such i wanted to address this. i asked a local company who have been nothing but helpful in the past with computer issues to take over the running of the website. Which they did. And then went on to say they don't deal with wordpress, would i basically like a new site......

I then messed around for several hours, updated my galleries, sorted the spelling and address etc and thought it was ok. Obviously not.

For several years the site has been fine. The hack happened the day after i updated things and about a week after new company is on the scene, so maybe i have done something, maybe they don't have the knowledge of protection that the old place did, i did do a few updates when prompted. I don't know whats happened. I hadn't even heard of wordpress until they told me they don't do it.

I spoke to them today and they do have a back up of the site so making a new one should be straightforward.

The thing is i get bombarded with sales calls from sloppy rude and ill prepared internet seo 'specialists' who i ignore. They spout bullst i don't understand which frustrates me.

I just want to be able to log on to it, update it and thats it. I have been told that to come up high in the listings i need to update frequently. having a Facebook feed on my homepage would do this (so I'm told). Which would be great as Facebook takes seconds to update from my phone.
I have been told that all the old seo stuff such as inserting words like 'driveways essex' no longer works.

So you see ill build you a lovely drive or garden but haven't a fking clue how the internet works hehe

Edited by m3jappa on Friday 23 February 20:31
m3.

First off, do you want to come up high in the google searches?
to get high in google (having good SEO) can be a massive pain and often not worth your time unless you can get onto the first page for a good search term, which is getting harder and harder.

Much more important is that someone can find you in google maps... and I found you straight away. second result.

I have found most SEO experts to be completely useless and do little more than try to con the customer.


also, your website looks fine now to me, decent site as well!
Security issues are unfortunately common. just make sure wordpress is set to auto-update and follow the advice of people on here with security addons etc.

jammy-git

29,778 posts

213 months

Friday 23rd February 2018
quotequote all
4x4Tyke said:
Yep, sorry I tried to keep it straight forward, but unfortunately go suckered into the technical to put the amateurs know alls in their place.

Wordpress is what is known as a content management system, that describes it purposes, to help you manage the content of your site, your articles, blogs, images etc. A decade ago it was a fair solution. However time and technology has moved on, the wordpress core became bloated with feature creep and plugins to provide a modern user interface, social media integration etc. Each of those plugins increase the work load and risk in looking after the site. There are plenty of alternatives (Joomla & Drupal for example) but on the whole, the comprehensive ones suffer the same legacy risks and limitations. That is why they all need security and extension plugins, which need to be kept up to date to remain secure.

You could follow the advice above and do it yourself with Wordpress or a competitor product, however given your comments above which I agree with; you are trades/businessman, you should be concentrating on that not IT. I'll continue to rule out wordpress.

Broadly speaking you have a few options, but they are mostly variations of the outsourcing the initial work.

Go back to the company you trust, give them a broad expression of your requirements, focus on your business needs, not technology sparkle. What you've posted above fleshed out with more detail and let them propose a solution. Include the requirement that it must be simple to use so that you can update the content. It could be they are geared towards IT support rather than website development and may not want that work, if so then find a local web development agency.

To give an examples of the simplest solution take a look at these, these are templates for modern HTML5 responsive web sites. Responsive means they will work well with a range of different client devices from phones, tablets and PCs.

https://html5up.net/

There are plenty of other collections with similar features, search "Responsive WebSite templates".

These are simple to use, copy a template for a content page, paste in your text and upload the file to your host. Some template providers will take your existing content and customise one of their templates for you for very modes sums. Then all you need to do is upload the site.

These are much more secure because they much simpler and operate almost entirely on the client device. They have no need for things like wordpress or PHP the programming language used by most CMS. A few use node, angular on the server but to play safe avoid those for the same reasons you should avoid wordpress, simplicity and security.
So, you think WordPress is beyond the OPs technical ability but recommend he install a vanilla HTML5 template site and edit code himself. I can see that working well...

LDN

8,911 posts

204 months

Friday 23rd February 2018
quotequote all
Wordpress is somewhat bloated - but it’s still a great platform. Tech has moved on but Wordpress is still powerful. With it being so commonly used; it was always going to be a target for the hackers; plugins and hacks don’t help either.

But I’ve presently got a handful of sites based on Wordpress. The Wordpress iPhone APP lets me edit them all on the fly; SEO can be easily managed and it’s just something I’ve become very familiar with. I remember trying Joomla years back and it just seemed a nightmare. I even ran two online shops on Wordpress, with great success. They have now evolved and I do use BigCommerce for them now. However; up to a point, Wordpress served its purpose to great effect.

There is a snobiness around this stuff from developers. But I’ll give you an example why common platforms do have their advantages... a company I worked for in London had a bespoke website done; to manage their client base / subscribers with pay wall content and all sorts of clever stuff; cost a LOT of money. The developers looked after it for years, until one day the developers were closing up shop. Cue all sorts of stress with regard the platform and who will manage it. So other developers were brought on board, but struggled and would complain at the setup, pushing for another bespoke site to be made, on their terms.

Rinse and repeat.

The result, after a lot of debate, was to start again but with Wordpress; with bespoke code / some clever hacks... it worked and developers can pass on the responsibility now as the platform is familiar to everyone, and any custom stuff is easily identified and maintained. The co. are very happy with this setup now.

Fully bespoke stuff is only good to a point.

But back to the OP; you could even look at Squarespace or WIX. Easy to make decent looking websites; the code is all over the show and a developer would call it blasphemy... but a friend built a site with WIX and is happy with it.

ymwoods

2,178 posts

178 months

Saturday 24th February 2018
quotequote all
From looking at your site your sorted but if you need some help with simple updates in the future give me a shout, don't mind doing a favour for a PH'er

Obviously anything more than simple updates would need to have a talk about smile

NorthDave

2,366 posts

233 months

Saturday 24th February 2018
quotequote all
LDN said:
Wordpress is somewhat bloated - but it’s still a great platform. Tech has moved on but Wordpress is still powerful. With it being so commonly used; it was always going to be a target for the hackers; plugins and hacks don’t help either.

But I’ve presently got a handful of sites based on Wordpress. The Wordpress iPhone APP lets me edit them all on the fly; SEO can be easily managed and it’s just something I’ve become very familiar with. I remember trying Joomla years back and it just seemed a nightmare. I even ran two online shops on Wordpress, with great success. They have now evolved and I do use BigCommerce for them now. However; up to a point, Wordpress served its purpose to great effect.

There is a snobiness around this stuff from developers. But I’ll give you an example why common platforms do have their advantages... a company I worked for in London had a bespoke website done; to manage their client base / subscribers with pay wall content and all sorts of clever stuff; cost a LOT of money. The developers looked after it for years, until one day the developers were closing up shop. Cue all sorts of stress with regard the platform and who will manage it. So other developers were brought on board, but struggled and would complain at the setup, pushing for another bespoke site to be made, on their terms.

Rinse and repeat.

The result, after a lot of debate, was to start again but with Wordpress; with bespoke code / some clever hacks... it worked and developers can pass on the responsibility now as the platform is familiar to everyone, and any custom stuff is easily identified and maintained. The co. are very happy with this setup now.

Fully bespoke stuff is only good to a point.

But back to the OP; you could even look at Squarespace or WIX. Easy to make decent looking websites; the code is all over the show and a developer would call it blasphemy... but a friend built a site with WIX and is happy with it.
Pretty much exactly what happened to us - bespoke sites through "agencies" all with flaws on some level and hugely expensive. Went with Wordpress and it has it's issues but I now have a developer from one of the pay per hour sites who keeps things updated and the site flies. If he gets run over by a bus tomorrow then I can get another guy at a moments notice.

Of course developers don't like it - they want to build a one off bespoke site which shows off their talents. I'd rather have an M5 than a lambo for day to day use.