Question Been hacked four times in the last 3 or 4 weeks.

Hello, so even though I have this firewall running, I have still been hacked three of the last four times. I have it set to block all countries except for the United States. Is there anything else I can do to block these people?

Hi David,
let's see if we can get this 'fixed'.
What do you mean by hacked? Was you website taken over / defaced, where accounts (super users) created? Was malware installed and pushed to your website visitors? Was data compromised / stolen?

Just so we are on the same page here.

for the record: this is not a quick fix but requires some exchange of what it is / who they are / what they do / etc.

They are able to somehow upload a zip file and then unpack the zip file and the zip file will have HTML pages named after Links of the menu. And so when you click on one of the items of the menu it redirects you to either gambling site in China or porno site in Russia or something along those lines

Hi David,
that sounds like your site is already compromised and or has an extension with a security issue that via that issue allows uploading of (zip) files.

Best thing to do is check every extension and make sure it is on the newest version, but if your site was already hacked, the hackers could as well have created their own 'extension' on your site: so updating to the latest version will then not make a difference as they are still able to upload things to your site via their own code.

Best advice here is link your site to mysitesguru and run a security scan: that is currently the best in class when it comes to (repairing and spotting) hacked sites.

If you do not want to go that route, then you need to be able to get your hands on server logs and locate the zip upload in there: that will then give some clue as to where to look next.

My advise is to go to mysites.guru/ and get a free site audit. then you have at least some more info in appr. 2 minutes.