How do I replace my hacked WordPress site?

Rename the WordPress directory

1. Log in to the web server via FTP.
2. Navigate in to your website directory. If you’re in the correct directory, you’ll see a list of files and directories beginning with wp-. It’s also possible you installed WordPress in a subdirectory such as /blog.

3. Rename the directory to something like example.com_HACKED. If it’s in a subdirectory, rename it to example.com/blog_HACKED.

   When you rename the web directory, your site will immediately be taken offline.

4. Create a new, empty domain directory with the same directory name as the original.

Reinstall a new unhacked copy of WordPress

You can reinstall WordPress in either of the following two ways:

• Manually (using FTP or wp-cli).
• From your DreamHost panel.

From the panel

1. Navigate to the Manage Websites page.
2. Click the Manage button to open Website settings, which allows you to modify various configurations for your site.
   • If in Grid view, click the Manage button at the bottom of the website box.
   • If in List view, click the Manage button at the far right of your domain name.
3. Click the WordPress tab.
4. Scroll down to the Reset and Removal Tools section.
5. Next to Remove DreamHost Management, click the Remove button.

6. Click the Confirm Removal button.

   You’ll be redirected back to the dashboard tab.
7. Scroll down to the WordPress section.
8. Click Get Started.
9. Select Custom Installation and then choose None for the site's purpose, which installs a clean version without additional themes or plugins.

Connect your new install to your old database

You must connect the new files you’ve downloaded to your existing database. To do this, you need the following information:

• Database name
• Database username
• Database user password
• Hostname
• Table prefix

This information is located in your former wp-config.php file:

1. Log in to your server via FTP.
2. Navigate to your former hacked directory, which you renamed to example.com_HACKED.
3. Open the wp-config.php file. You’ll find all of the values listed above.
   • The table prefix line begins with $table_prefix =.
   • For DreamHost installs, the table prefix starts with wp_ and is followed by a series of random numbers and letters. For example: wp_17Dz9g.
4. Change to your new WordPress install directory.
5. Delete or rename the wp-config.php in that new folder.
6. Load your site.
7. Select your preferred language, and then click Continue.
8. Click Let’s go! on the setup page.
9. Enter the required information, and then click Submit.

10. Click the Run the install button.

    Since you already have data, a message appears indicating that WordPress is already installed, which means that you've successfully connected your WordPress installation to your old database.

Add previous content

Your WordPress site is now fully installed and connected to your old database. However, you must now add all of your previous themes, plugins, and uploaded images.

Install your previous theme

Download and install a NEW copy of your theme rather than moving the theme files from your old install.

• If you changed your theme to the default theme before you started, your site should load your posts, but without the correct theme.
• If your specific theme is not currently installed, you can install it through the WordPress dashboard.

Once you have your chosen theme installed and activated, you should be able to load your site and see your posts.

Install former plugins

Install NEW copies of your plugins rather than copying over the files from the hacked install.

Also, only install the plugins you know you need and use. Cutting down on inactive plugins limits a hacker's access to your install and makes WordPress run faster as well.

Copy your previous uploads

Your uploads (images and other media) are still in the old hacked install's directory. Using FTP, copy the contents from the old folder to the new one. For example:

example.com_HACKED/wp-content/uploads

example.com/wp-content/uploads