T-String error (site down completely)
Posted: 06 October 2009 07:47 AM   [ Ignore ]  
Grad Student
Rank
Total Posts:  69
Joined  01-24-2008

I woke up this morning to a t-string error on my site:  http://www.anothercubsblog.net.  Does anybody have any idea what could be wrong and how to fix it?  Thanks in advance.

Profile
 
 
Posted: 06 October 2009 07:58 AM   [ Ignore ]   [ # 1 ]  
Moderator
Avatar
RankRankRankRankRankRankRank
Total Posts:  20972
Joined  04-29-2002

What’s on line 61 in your template?

 Signature 

EE 2.01PB - 2.x Bug Tracker | Docs | Upgrade from 1.x to 2.x | Build Update Instructions | 1.6.x Update Info

Most recent 2.x version: Build 20100215
Don’t forget to upgrade MSM and Forum as needed!

Profile
MSG
 
 
Posted: 06 October 2009 08:33 AM   [ Ignore ]   [ # 2 ]  
Grad Student
Rank
Total Posts:  69
Joined  01-24-2008

This is on line 61:

<!-- [d8caa74da1abe2c1830d9282607a62b4 --><!-- 3489184521 --><div style="overflow:auto; visibility:hidden; height: 1px; "><ul><li><a href="http://rtbi30h3h34h34.cc/1">.</a></li></ul></div><!-- d8caa74da1abe2c1830d9282607a62b4] -->

I checked back a couple months and the only thing on line 61 then was a closing bracket.  What happened?

Profile
 
 
Posted: 06 October 2009 08:44 AM   [ Ignore ]   [ # 3 ]  
Grad Student
Rank
Total Posts:  69
Joined  01-24-2008

I reverted it back to the index.php from a couple months ago and all is fine now.  How did that code get added to that file?

Profile
 
 
Posted: 06 October 2009 08:47 AM   [ Ignore ]   [ # 4 ]  
Moderator
Avatar
RankRankRankRankRankRankRank
Total Posts:  20972
Joined  04-29-2002

It sounds like you may have been hacked.

Thanks for reporting this. We take security very seriously and will do our best to work with you on figuring out what’s going on. To that, we need some additional information from you…

  1. EE version and build (found at the bottom of your control panel)
  2. Other scripts on your account, whether in use or not (phpBB, etc…)*

  * If this is a shared hosting environment, the host can make a determination if the attack came through scripts on another account on the server, which is commonly the case with these types of hacks.

  While we work through this, please check through these files:

  * path.php
  * config.php
  * index.php

  to ensure that there is no unusual code such as iFrames or Javascript includes; if you do find that code, then please back-up the file and remove said code.  If you are unsure of what does or doesn’t belong in these files, do not hesitate to ask.

  You may also wish to refresh your files by following the build update instructions.

  Also please ensure that you report this to your host immediately as they can help identify where the attack originated from so that steps can be taken to prevent this in the future.

 Signature 

EE 2.01PB - 2.x Bug Tracker | Docs | Upgrade from 1.x to 2.x | Build Update Instructions | 1.6.x Update Info

Most recent 2.x version: Build 20100215
Don’t forget to upgrade MSM and Forum as needed!

Profile
MSG
 
 
Posted: 06 October 2009 08:58 AM   [ Ignore ]   [ # 5 ]  
Grad Student
Rank
Total Posts:  69
Joined  01-24-2008

Thanks, Sue.  Version and Build:

ExpressionEngine 1.6.8
Build:  20090723

Additional scripts:  Lime Survey, Advanced Poll, Flash Chat, Media Wiki


I’ll update the newewst build sometime today and contact my host.

I’ll report back if needed and thanks a lot for the help.  This is the first time it’s happened in nearly 2 years. 

Thanks again.

Profile
 
 
Posted: 06 October 2009 09:00 AM   [ Ignore ]   [ # 6 ]  
Moderator
Avatar
RankRankRankRankRankRankRank
Total Posts:  20972
Joined  04-29-2002

Let us know what you find out.

 Signature 

EE 2.01PB - 2.x Bug Tracker | Docs | Upgrade from 1.x to 2.x | Build Update Instructions | 1.6.x Update Info

Most recent 2.x version: Build 20100215
Don’t forget to upgrade MSM and Forum as needed!

Profile
MSG
 
 
   
 
 
Post Marker Legend
New Topic New posts Hot Topic Hot Topic with new posts New Poll New Poll Moved Topic Moved Topic Sticky Topic Sticky topic
Old Topic No new posts Hot Old Topic Hot Topic with no new posts Old Poll Old Poll Closed Topic Closed Topic Announcement Announcements
Theme
Change Theme
Visitor Statistics
The most visitors ever was 1743, on December 02, 2009 03:47 PM
Total Registered Members: 120152 Total Logged-in Users: 62
Total Topics: 126293 Total Anonymous Users: 31
Total Replies: 664180 Total Guests: 332
Total Posts: 790473    
Members ( View Memberlist )