Wordpress Pharma Hack

I recently removed a Pharma Hack from a clients wordpress site, there were no obvious symptoms that there was anything wrong, so here's some tips:

First, see if you are infected by typing the following into google

inurl: www.mydomainname.com cheap

inurl: www.mydomainname.com buy

if the google results show links with your domain going to various drugs like viagra or cialis then you have been hacked.

How to Fix Wordpress Pharma Hack

every hack attack can be different but in this case the hackers code was found in the wp-config.php file, two long lines of encrypted code starting with:


So search through all your php files looking for "base64_decode". It was safe to remove both lines of code, then wait for google to retrawl (about a week) and then problem is fixed

Make a Comment

Website and Software Development Services
Tweed Heads & Southern Gold Coast

Our network of experienced computer programmers can develop custom software solutions in any language on any platform.

Our Talents

Freelance Power

We maintain a network of local freelance computer programmers that we place in teams to match project requirements. This gives us expertise in a broad range of industries, languages & platforms

Fix, Upgrade or New?

We can fix broken legacy systems, plan and oversee a difficult upgrade, add or unlock new features to your existing software. Or install and set-up new systems from scratch, including hardware and software


We can build solutions fast, Software as a Service (Saas), apps, web applications, desktop software, Minimum Viable Product using Agile Development practices


We can build simple to complex websites, we can deliver the whole package including site design, branding, logos, domains and hosting


C/C++, Java, JavaScript,
Python, Swift, Meteor,
Objective C


MongoDB, NoSQL


Linux, Mac, Windows, iPhone, Android, Smart Phones, Tablets


Wordpress, Drupal, Magento, Moodle, Sharepoint Online, Office 365