• Resolved Zammael

    (@zammael)


    Bad news. I got hacked. I think 4.6.1 is my latest version.

    Anyway, I am the webmaster of the Heterodoxia blog. Unfortunately, after a year’s worth of hacks (my server said that they were targeting my mobile plugin) I thought things went back to normal. This morning, my blog won’t load, and instead spits out this line:

    Parse error: syntax error, unexpected ''; ' (T_CONSTANT_ENCAPSED_STRING), expecting ')' in /home/hyperbor/www/www/heterodoxia/wp-settings.php on line 31

    Here’s the code of the settings file:

    {
          $ff .= substr(pack('H*', sha1($fa.$ff.$fe)), 0, $n);
    • This topic was modified 9 years, 2 months ago by Zammael. Reason: sorry, i didn't realize how large the php was
    • This topic was modified 9 years, 2 months ago by Steven Stern (sterndata). Reason: put code in backticks
Viewing 9 replies - 1 through 9 (of 9 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    If you’re unable to clean them, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are two.

    Thread Starter Zammael

    (@zammael)

    SternData,
    Thanks for the swift response. I will follow your advice.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    FYI, someone else just reported the same string in a core file, so at the very least, you’re not alone.

    Thread Starter Zammael

    (@zammael)

    yes, I see from the email notifications.
    My host said that it was partially my fault because as previously stated, there was an automated attack earlier this year and I did not completely clean my wordpress installation. They found malicious code left from that time, and now my blog is history.

    So they advise me to save the important files like wp-config.php and the image files in my wp-content/uploads directory.

    I am not sure what else to save before wiping out the directory and do a clean re-install of wordpress.
    Let me know 🙂

    Thread Starter Zammael

    (@zammael)

    I mean, how do I know which files are not part of the original WordPress package?

    I vouchsafe the following are mine:
    (file name)_wordpress.sql, sitemap.xml.gz.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    delete all the .php files except wp-config.php and reinstall wordpress and your plugins. Check wp-config, though, for anything that looks odd.

    Thread Starter Zammael

    (@zammael)

    Thanks. I’ve saved all the necessary files, and put down the plugins that I use.

    And I will check the wp-config file, tho I am pretty much an ignoramus when it comes to coding. 😛

    ETA: Are all the blogs I’ve written saved on the database, rather than the files in the WordPress directory?

    • This reply was modified 9 years, 2 months ago by Zammael. Reason: Follow up question
    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Check a clean copy of wp-config-sample.php for an idea of what wp-config.php should look like. Your posts are in the database.

    Thread Starter Zammael

    (@zammael)

    Thanks for your help, Sterndata.
    My blog is back up.
    Lesson learned!

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Parse Error: Syntax Error’ is closed to new replies.