How to permanently remove malware from a website

i’m really tired of some malware on my shared hosting sites. Most of the websites are based on wordpress and the files are always getting modifies with codes like the following: x47\x4c\x4fB\x41\x4c\x53. Even on new website with empty domain folders it gets infected just a few days after adding a new website to my shared hosting.

I use a security plugin for wordpress and it works fine and cleans everything, but the problem that they just come back again infected after few days too. I can’t find the source of the problem or why it keeps on coming back. I tried activating a firewall security with my hosting provider and it stops, but it’s a very expensive service that i can’t afford monthly, I believe there should be other solution that i can do. Not because it’s a shared hosting means i will always be infected like an open door.

My question is: how to remove the source of this malware and stop it from hitting back even my empty folders? I look forward for your kind assistance on this.

Continue reading How to permanently remove malware from a website

Is it possible for a vulnerability in one application to be exploited to attack another application on the same server?

If for example I have Magento-eCommerce and WordPress installed on the same server. Both have a database each with a different database username/password and both have different login details to the admins.

If there was a se… Continue reading Is it possible for a vulnerability in one application to be exploited to attack another application on the same server?