Comments on: Why did my Wordpress blog freak out when I wasn't looking?

Question: Why did my Wordpress blog freak out when I wasn't looking?

wayward vagabond — Thu, 14 Jun 2007 11:01:00 -0800

Wordpress filter: Why did my Wordpress blog freak out when I wasn't looking? What could have caused it to change themes all on its own?

So I have a blog running on a Wordpress installation (2.1) with a customised theme, and the other evening as I clicked past, I saw that eeep!! it was showing the Kubrick default theme!! Even though I hadn't touched it/changed it/breathed on it!! Cue panic attack.

I quickly went into the admin panel and changed it back to the custom theme, which seemed fine. I peeked into the server files and everything seemed to still be in its right place, so I backed everything up again (files, database, etc. - just in case) and changed my password (just in case - though I can't imagine anyone wanting to hack in just to change a theme). A reader then emailed and said that when she went to leave a comment the other day (not sure how many days ago), the theme was fine but the popup comment box was in the blue and white default theme, and it wouldn't accept her comment. I never saw any of that.

I *swear* I didn't "accidentally" change the theme. So what gives? All seems to be fine at the moment, but what could have caused this behind-the-scenes freak out? And what else should I be checking for?

(I'm not an idiot, but what I've learned about Wordpress I've mostly learned through lots of trial and error. And I'm not terribly savvy when it comes to server stuff. As far as I can tell it's mySQL version 5, PHP version 5.0.2 )

By: mathowie

mathowie — Thu, 14 Jun 2007 11:51:57 -0800

If you have an older version of WP, there are security exploits out there that can remotely log someone in, and change the templates to include spam links hidden from view.

By: todbot

todbot — Thu, 14 Jun 2007 11:57:24 -0800

I had this problem too on one of my blogs. As did many others on the Wordpress forums. I could never figure out what exactly was causing it. So instead I renamed my theme 'default'.

By: theiconoclast31

theiconoclast31 — Thu, 14 Jun 2007 12:28:58 -0800

You're not hosted by Dreamhost, are you? They recently lost a whole bunch of user information, maybe you account was affected.

By: crickets

crickets — Thu, 14 Jun 2007 12:30:28 -0800

Dreamhost once upgraded my WP site without warning, and it reset my theme. WP has been a security issue in the past, so they try to move quickly when stuff comes up I think.

By: wayward vagabond

wayward vagabond — Thu, 14 Jun 2007 13:08:31 -0800

If you have an older version of WP, there are security exploits out there that can remotely log someone in, and change the templates to include spam links hidden from view.

Hmmm, how would I know if this has happened? What am I looking for in the templates?

By: wayward vagabond

wayward vagabond — Thu, 14 Jun 2007 13:11:04 -0800

You're not hosted by Dreamhost, are you?

Nope - not hosted by dreamhost. Lycos.

I had this problem too on one of my blogs. As did many others on the Wordpress forums.

I looked through the forums and didn't see anything pertaining to this - could you point me in the direction of the thread?

I'll go have another look. And maybe rename my theme to default ;)

By: wayward vagabond

wayward vagabond — Thu, 14 Jun 2007 13:35:44 -0800

ah, I found the thread on the Wordpress forums... thank you! i'm gonna try renaming my theme as suggested above.

By: mathowie

mathowie — Thu, 14 Jun 2007 14:06:05 -0800

how would I know if this has happened? What am I looking for in the templates?

This is a good explanation of what you might see. You'll want to update to wordpress 2.2 to be sure.

By: wayward vagabond

wayward vagabond — Thu, 14 Jun 2007 14:29:05 -0800

thanks for that - will do. cheers.