• GoDaddy Community
  • Managed WordPress Hosting
  • Managed WordPress Hosting

    cancel
    Showing results for 
    Show  only  | Search instead for 
    Did you mean: 
    Go to solution

    GD-Config.php file hacked

    I recently got an email from Google telling me my website got potentially hacked. It looked like this:

    https://www.dropbox.com/s/if0tuz6xa406afg/Screenshot%202020-05-05%2014.38.06.png?dl=0

     

    Was wondering if the community had experienced similar issues. My belief is that the hackers somehow manipulated a file called "gd-config.php".  What they then did, is install a folder on my home directory with content promoting their weird products and services. 

     

    Warning: require_once(/var/www/gd-config.php): failed to open stream: No such file or directory in /var/www/wp-config.php on line 85

     

    Fatal error: require_once(): Failed opening required '/var/www/gd-config.php' (include_path='.:/opt/remi/php73/root/usr/share/pear:/opt/remi/php73/root/usr/share/php:/usr/share/pear:/usr/share/php') in /var/www/wp-config.php on line 85

    1 ACCEPTED SOLUTION
    Super User IV

    @hellomarcoliver 

     

    1) I would look at line 85 on your wp-config.php file and see what's there

    2) as this is on Managed WordPress the gd-config.php should be there - I thought it was typically locked down for security purposes

     

    I'm not getting a redirect on your site but rather seeing the PHP errors

    I am a GoDaddy End User - Just Like You
    Check out my site! | I currently manage over 300 WordPress Websites
    * Please note that I offer free advice on this forum. Thank You Info If you would like personalized help, please contact me. Otherwise, please ask your question in the proper forum so the answer can assist EVERYONE in the community and not just you. Thanks! *

    Once your issue is resolved,
    please be sure to come back and click accept for the solution

    Get Better Support on the Community Boards!
    Etiquette When Asking for Help from the Community

    View solution in original post

    2 REPLIES 2
    Super User IV

    @hellomarcoliver 

     

    1) I would look at line 85 on your wp-config.php file and see what's there

    2) as this is on Managed WordPress the gd-config.php should be there - I thought it was typically locked down for security purposes

     

    I'm not getting a redirect on your site but rather seeing the PHP errors

    I am a GoDaddy End User - Just Like You
    Check out my site! | I currently manage over 300 WordPress Websites
    * Please note that I offer free advice on this forum. Thank You Info If you would like personalized help, please contact me. Otherwise, please ask your question in the proper forum so the answer can assist EVERYONE in the community and not just you. Thanks! *

    Once your issue is resolved,
    please be sure to come back and click accept for the solution

    Get Better Support on the Community Boards!
    Etiquette When Asking for Help from the Community

    View solution in original post

    @hellomarcoliver 

     

    I also was able to get the site to load by adding ?nocache=1

    I am a GoDaddy End User - Just Like You
    Check out my site! | I currently manage over 300 WordPress Websites
    * Please note that I offer free advice on this forum. Thank You Info If you would like personalized help, please contact me. Otherwise, please ask your question in the proper forum so the answer can assist EVERYONE in the community and not just you. Thanks! *

    Once your issue is resolved,
    please be sure to come back and click accept for the solution

    Get Better Support on the Community Boards!
    Etiquette When Asking for Help from the Community