This evening I found out that my WordPress website was hacked on 17-09-2009 10:00 localtime (Two days ago).
Not visible spam was added to the footer of this website and all downloads access rights were changed. Does anyone know how this is possible with WordPress 2.8.4? I upgraded three weeks ago my website to WordPress 2.8.4 so I personally think this hack is done with a WordPress 2.8.4 exploit!
The good news is that now everything is working normal again because i did the following things:
- Removed the spam from the footer.php template!
- Corrected the download access rights!
- Protected my score webservice against SQL insertion
- Set the unix file rights to readonly
- Changed all passwords


OK thats not fair, why someone hack you. You make nice homebrew, whats wrong with the hacker guys? Nothing to do?
Thanks for you support!
I hope you have a backup for your site and the bad guys do homework and not hacking sites.
You are totally right! Greeting
the wii pong2 homebrew download is still coming up as 0 bytes.
any idea when this will be fixed?
Thanks for the comment, I have added the requested files again!