Forum Moderators: open

Message Too Old, No Replies

how can I remove garbage from my database

         

alexod

6:10 pm on Mar 12, 2020 (gmt 0)

10+ Year Member Top Contributors Of The Month



hi there,

my website have issues with mixed content, that's why I decided to go into database and whatever I saw there that was something. A lot of #*$! text in wp-post table, and it's in the case that my website hasn't been hacked and now everything is ok on userend and backend

I tried to install database cleanup plugin: remove all comments, all revisions, all transients, but can't remove this staff from the database. Can you help me with my questions?
1. How this stuff goes into database, if there isn't no such post/page/comments?
2. How can I remove it? I know that I can try to remove it manually, but it need to be other way ... it's too much
3. Is there any way to protect myself for such intervation?



[edited by: not2easy at 5:58 am (utc) on Mar 13, 2020]
[edit reason] ToS/Privacy [/edit]

lammert

12:43 am on Mar 13, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Is this the wp-post table or wp_posts? In the latter case, your site is WordPress based and someone must have been able to add or access an account on your site with enough rights to publish new posts.

First you have to upgrade the CMS and the plugins to the newest versions to plug possible security holes.
Next step is to change the system settings to prevent new accounts with posting privileges to be created.
Then remove all posts which you don't want on the system. Best is to do this through the interface of the CMS, not directly in the database. Often multiple tables have to be changed and the only safe way to do that is by letting the application do it for you.
When all unwanted posts have been deleted, monitor the system carefully to see if new unwanted users are created or new posts emerge.

And last but not least, change the passwords of your account (CMS, hosting etc) to something new.

alexod

1:17 am on Mar 13, 2020 (gmt 0)

10+ Year Member Top Contributors Of The Month



Quick reply: there is no any published, draft or trash article on backend. There isn't any user acc, only 2-3 that I created, no more
There only one such table in wp, I'm not sure its wp_post or wp_post, but that's the only default table for post and pages.

not2easy

1:56 am on Mar 13, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



It looks like automated attempts (failed scripted posts) at posting spam. Is it possible that Akismet (anti-spam plugin) stores these posts? If they are in the database, something is adding them. Is is possible to determine a time-stamp from any of the entries and match it up with access logs? That might show you how/where it is coming from at least.

alexod

5:55 am on Mar 13, 2020 (gmt 0)

10+ Year Member Top Contributors Of The Month



That was Flamingo message storage plugin, which use wp_posts plugin and there was >10K messages. All messages removed, list of blacklist words installed. Thanks not2easy for directing in right direction (akisment/flamingo, etc :)

not2easy

5:57 am on Mar 13, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I'm glad you could find the source of it. Even if it doesn't show, it adds to your database overhead.