We will run a scan through our entire list of server and all affected websites will be suspended until you fix the vulnerability. It spreads through the Themes you use in your WordPress.

An image resizing utility called timthumb.php is widely used by many WordPress themes. Google shows over 39 million results for the script name. If your WordPress theme is bundled with an unmodified timthumb.php as many commercial and free themes are, then you should immediately either remove it or edit it and set the $allowedSites array to be empty. The utility only does a partial match on hostnames allowing hackers to upload and execute arbitrary PHP code in your timthumb cache directory. I haven’t audited the rest of the code, so this may or may not fix all vulnerabilities. Also recursively grep your WordPress directory and subdirs for the base64_decode function and look out for long encoded strings to check if you’ve been compromised.

How to fix:

As per several requests I’m posting hopefully easy to use instructions on how to fix this. This is for the latest version of timthumb.php version 1.33 available here http://code.google.com/p/timthumb/source/browse/trunk/timthumb.php . Check your version because there are many much older versions floating around.

NOTE: timthumb.php is inherently insecure because it relies on being able to write files into a directory that is accessible by people visiting your website. That’s never a good idea. So if you want to be truly secure, just delete the file using “rm timthumb.php” and make sure it didn’t break anything in the theme you’re using.  If you still want to use it but want to be a bit more secure, you can follow the instructions below.

This will disable timthumb.php’s ability to load images from external sites, but most bloggers only use timthumb.php for resizing local images:

1) Login to your Cpanel File Manager.

9) The next line should be blank and the following line will probably say “STOP MODIFYING HERE”

That’s it. Save the file and you’re done.

domain-register-howto-Image1

3. Enter the name you want and select your required TLD (Top Level Domains like .com / .net etc ) . The Domain Checker will show you available domains with the price for registering the same domain name

domain-register-howto-Image2

4. select the available required domain name and clieck order now
5. Update your name servers. The default name servers will be dns1.dnsentries.com and dns2.dnsentries.com. These default name servers are required only when you are planning to host your web sites with Hexahost. If you have a hosting account with any other web hosting provider you can update thier name servers here by selecting “use custom nameservers” .

domain-register-howto-Image3

6. Click update cart
7. Select your Payment methods  Paypal – For International customers / EBS – For Indian Customers
8. Read and Agree the terms of services
9. Review and click “Complete order
10. You will be redirected  to your Payment gateway Paypal OR EBS
11. Pay the Invoice ammount
12. You will get an E-mail shortly with your Domain registration information

First of all you need to create an account with Hexahost as per http://hostinghexa.com/getting-started/how-to-register-with-hexahost-web-hosting-provider.html

Using the Hexahost Portal home  you can :

1. Check a domain name for your website and if is avaialble you can register your Domain name with Hexahost using https://hexahost.com/billing/domainchecker.php
2. You can place new Hosting order by using  https://hexahost.com/billing/cart.php
3. You can view latest Hosting announcements using https://hexahost.com/billing/announcements.php
4. If you have any issues with your web sites hostted on Hexahost you can Create a support ticket using https://hexahost.com/billing/submitticket.php

Creating a membership ID with Hexahost web hosting provider is very simple and free.

1. Open your favorite web browser
2. Enter https://hexahost.com/billing/register.php in your address bar
3. Fill in all relevant details such as First name, Last name, Company name (if applicable), Email address , Postal address, City, State/region, Zip/Postal code, Country, choose your own password
4. Read the Terms of service and agree if you wish to continue
5. Click continue

Welcome to Web Hosting Knowledge base by Hexahost.com. This Website is a dedicated knoledge base for Hexahost Hosting customers.  Here you can find almost all answers to your Hosting questions.

Latest Topics included in the Web Hosting Knowledge base :

1) Getting started with Hexahost web hosting

2) Web hosting how to

2) Reseller hosting how to

3) E-mail hosting how to

4) Virtual private server VPS hosting how to

Please read the relevant topics further.