GoDaddy has been suffering MAJOR WordPress hacks this week, and some were even today. This is happening on other sites that are running on PHP that aren’t running WordPress too.
Here are some news posts about the hacks:
http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
Note all the GoDaddy WordPress hack news here:
http://www.wpsecuritylock.com/
My thoughts after the jump.
My Thoughts:
Companies like GoDaddy that charge $5 a month per customer for a blog can’t possibly fix this issue, and GoDaddy has been tight-lipped about this problem. I spoke with someone who was hacked today, and he is an IT pro from PA that I have been friends with for years. He says that his site has ridiculously long passwords, and they were hacked already, which makes him think that the server that he is on has been rooted (hacked at the root of the server).
We like WordPress, this blog is running on WordPress (for now), but we will be leaving WP as we add more blogging features to our CMS-Logic system. My friend is telling me that he spent all weekend fixing sites that have been hacked on GoDaddy. Yes, you can use open-source software and build a great website, and yes, you can host that website for $5 a month. But your site won’t evolve, and you will be a target. This is one of the reasons we invested in building our own CMS instead of building websites on free blog software.
Here is a link on how you might fix your hacked WordPress blog on GoDaddy:
http://www.blogtips.org/how-to-cure-your-godaddy-wordpress-hacked-blog/
Also, to the troll that sent me a message yesterday (I know who you are) – yes, we have had WordPress blogs hacked as well. I think all hosts have. Basically, they stem from vulnerabilities in PHP, themes, and plugins. While most of WordPress’ problems with themes have gotten better, and Drupal has tightened the submission process for plugins, it can’t be denied that adding lots of points of failure will create a more fragile system (we can agree to disagree on that). Customers of GoDaddy that have Drupal sites were also hacked in the latest round of hacks there. ALL hosts can have this problem, but to not acknowledge it when literally hundreds of thousands of sites are compromised is why I called them out. I stand by my post.