- Access MTR Web through the Plesk CP because admin login page also infected with malware
- Exported database to backup
- Setup localhost MTR web check condition db
- Upgrade WordPress version & plugin
- Purchased license for premium theme
- Found a weird script in SQL file. The number of scripts included in SQL is 8256 scripts.
- Cleanup DB & test after several export and import database activities occur.
- Scanned file infected with malware. Found 152 malware code in files.
- Replaced with clean files
- MTR run smooth in localhost
- Transfer files to hosting but failed due of PHP v5 doesn’t support latest template.
- Upgrade PHP v5 to v7
- setup HTTPS
- Re-import DB to compatible with HTTPS
- Configured PHP extension
- Increase PHP input vars value
- Test run website. Work well
- Setup Security Firewall on website
- Allowed few files permission
- Prevent common username login
- Decrease login failed blocking