wordpress hack via wp-config