Nuts, this blog was hacked at some point in the last month with a code-injection exploit that was fixed in version 2.3.3 of Wordpress. I browsed to my homepage but was interrupted by Google telling me that visiting my site would bring untold death, destruction and the loss of my firstborn… or maybe it was something about badware. Anyway, after much gnashing of teeth and using www.spybye.org, I spotted that an iframe had been inserted into the site

I also simultaneously discovered that the Wordpress database backup plugin does not do what it says on the tin; it seems to send me a gzipped file with a 4kB file in it which only contains my database log-in details, and for the life of my I can’t work out why.  I could still do a manual back-up via my host, then text search in the file to confirm that I’d removed all references to the iffy iframe.  Hopefully the site should now be free from such crapola. Apologies for any inconvenience. If this isn’t a gentle nudge to keep up-to-date with Wordpress releases, I don’t know what is.