One of my sites was attacked this week much the same as this:

http://wordpress.org/support/topic/141041

We have since upgraded and removed a suspicous plugin. But I wonder if you could write something in plain English for the non-technical among us as to what was the cause of the problem and what we can do to protect against it. I’d like to alert friends and colleagues, but I’m not sure I understand how this attack occurred and what could have been done to prevent it.

Thank you.

Anita

PS, I tried to insert this into your contact form, but it just hung and hung.

Look for this line:

header(”Location: /”);

Change it to suit your needs, example:

header(”Location: /blog”);

For the next release, I’ll place a define statement at the top to make this easier to change.