My website seemed to be hacked: login on wuildit.com required...

[Gerben]

Dear all,

I created a new blog and published my website. Now a login screen is shown and visitors are asked to login on wuildit.com.

Is my website hacked? 

Who can help me?

[Adam7]

Sorry for the trouble, everyone! It sounds like the Waddons team is already on top of figuring out what's happening. Our App Center team is working with the developers of any affected apps to help get this resolved as quickly as possible.

[Tanyawhipple]

Any update?  I deleted the field with the app (Penguin) that I assumed was causing the issue (since it's not on any of my other sites) but the problem still persists even with that content gone

[Dots1]

I'm having the same issue....do you have an update?

[whawkins]

It looks like there is a 'Wuildit' script embedded in the code, which also mentions 'Webgains', the affiliate marketing service. 

Script in code

[Adam7]

It looks like they might have put a resource that the app needs behind some kind of password protection; if you cancel the login prompt your site will load but that css file will 404. Sounds like something that they can probably resolve pretty quickly!

[Becothy]

@Adam

I've had an email from Waddons. They are in constant contact with the guys osrting the issue and trying to speed things up.

Hopefully we wont have to wait too long for the problem to be resolved.

Although this is a disappoinitng positing to be in, its good that Weebly and Waddons are all over this trying to sort it!

[Adam7]

Thanks to you guys for posting about it! With an issue like this with a third party app we wouldn't likely know it was a problem unless someone lets us know. If they made a DNS change that shouldn't take too long in this day and age to resolve.

[katie11]

this is now the second third party app that has screwed up my Weebly site. how can anyone trust these 3rd party apps if Weebly isn't monitoring and testing them? 

[Travalerie]

I have the Waddons Bloggons Card on my front page. Wondering if I should remove it until Waddons can clear things up??
Update: I removed it but the sign-in box from wuildit.com still shows up no matter which page I navigate to. I hit cancel and my site loads and is viewable/usable. 

[MariFujii]

I removed the Waddons Blogons cards app from my Weebly website.  Then I went to Apps, My Apps and deleted the Blogons app from the website.  Published and now the Wuidit logon prompt dissapeared!

[Travalerie]

yes! that did the trick for me too! Just uninstalled the Bloggons card app and the wuildit box disappears. 

I'll have to keep monitoring this thread to see if Waddons provides a fix, if not, I won't reinstall it.

[Adam7]

I'm sure once their changes propagate it should be fine, although I can understand not wanting to use the app until it's confirmed as resolved.

[katie11]

did it impact the blog posts where you had used the Waggons cards (i.e. for image management). Did you go into each post first to delete or just delete the app?

[Travalerie]

I tested it first by just deleting the app on my front page but the sign-in box was still there. 

I emailed my website provider (not my host) and they suggested I delete the whole app by going into the My Apps section of my Weebly website. They gave a warning that some data could be lost, but I didn't see any data loss since it wasn't really collecting data (like stats) So far so good...

[katie11]

i deleted the app and it didn't seem to impact my blog posts. obviousy the waggons images are gone but otherwise things look fine.

[tm221]

This is beyond unprofessional. This impacts my choice to stay as a Weebly customer. Extreemly disapointing. How could this broken code have come online? 

[Becothy]

Hi all

Just heared from Waddons. Its all fixed!!!

Checked and all up and running.

[lovinjazz]

Yes, it seems to be fixed now. Well done!

[Adam7]

Glad to hear it's fixed, guys!