can old user login into new wordpress install

Question

I have a running website on wordpress which has been hacked, some file were changed by the hacker including wp-config.php file. Now i want to install new version of wordpress, installing new wordpress means new Keys and salts. Can old user login into my new wordpress site with the same old password?

Answer 1

If he changes the wp-congfig.php file, then he has the access to your server by cpanel or ftp. So by changing the WordPress Username/password or re-installing WordPress will not affect the hacker. Because wp-config.php file is in the root folder, not on theme folder.

Solution:

Change all the passwords of cPanel and FTPs.

Once you re-installed a fresh WordPress version and using the same old wp database, then all your old WordPress users can login to your website with old username and Password.