Way way way way back I was tasked with fixing a hacked wordpress and after getting rid of the c99.php off of it, my boss said "now we need to upgrade it" to which I said "the hell I will" and proceeded to remount the php-accessible directory tree read-only, and the uploads folder as non-executable.
To my knowledge, that WP was never hacked again, despite having a public known vuln.
Caleb James DeLisle
npub105…t88up
2026-10-21 12:44:17 UTC
in reply to nevent1q…tjtp
Author Public Key
npub10502c8jv0y27jwcwxcq9kd3ph2wg7pt8ycexf5w2fyzythe97w2s7t88upSeen on
wss://relay.momostr.pinkPublished at
2026-10-21 12:44:17 UTCEvent JSON
{
"id": "8116ad5afabc3fadc9aa15d2933d6d0855840e6749704972bcaba5845adacc12",
"pubkey": "7d1eac1e4c7915e93b0e36005b3621ba9c8f0567263264d1ca490445df25f395",
"created_at": 1792586657,
"kind": 1,
"tags": [
[
"p",
"bc99ecc661ecc2be90c8cbec0f3532b2742a455411782936822256a74b1bb7a2"
],
[
"e",
"6342e7814969312f9b4e35562929165f18e04c7d7707b58c3d33275c7deb622c",
"",
"reply",
"bc99ecc661ecc2be90c8cbec0f3532b2742a455411782936822256a74b1bb7a2"
],
[
"p",
"fdf201644e1aa8284a23a26220b1514b540588fc7ade768bb3c5386cbafc329f"
],
[
"e",
"dad618f5f4714ee13eca2174e585ede8603635b85d4379fb55c8366e0d2fc19b",
"",
"root",
"fdf201644e1aa8284a23a26220b1514b540588fc7ade768bb3c5386cbafc329f"
],
[
"p",
"058432ba8b50662c60fdc930686714c86883aa504a7b583444174bf9620a48db"
],
[
"p",
"214082762c704e8f5b822b10d7c23e461432955944d37d741c1b84ad1d838c83"
],
[
"proxy",
"https://pkteerium.xyz/objects/16368f7b-88d8-4bd0-aabb-13866579e420",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://pkteerium.xyz/objects/16368f7b-88d8-4bd0-aabb-13866579e420",
"pink.momostr"
],
[
"-"
]
],
"content": "Way way way way back I was tasked with fixing a hacked wordpress and after getting rid of the c99.php off of it, my boss said \"now we need to upgrade it\" to which I said \"the hell I will\" and proceeded to remount the php-accessible directory tree read-only, and the uploads folder as non-executable.\n\nTo my knowledge, that WP was never hacked again, despite having a public known vuln.",
"sig": "eaec435c8a8569660f99a9b280a26ee797e3c962b70b13c83a41c4e35b4b81c4bab5f33f7a42900c232017e477c868c08b1dd0a71d26f7ad430d01467b07d5d4"
}