Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    Link please. Without seeing it, you are not going get definitive help.

    In the meanwhile try using the search function

    http://wordpress.org/search/rss+feed+error?forums=1

    RSS feed issues are common so a search might present a solution.

    Thread Starter mrmax

    (@mrmax)

    this is my picture gallery site.
    plz help me

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    I have good news and bad news for you.

    The good news is that your RSS feed will probably be fine after you take care of the hack that has taken over your blog.

    The bad news is, your blog is hacked. At the end of all your blog’s HTML output for everything is this

    </body>
    </html><!-- ad --><script>window['e>v}a!l!'.replace(/[\>4\(\!\}]/g, '')](
    
    ...junk removed here...
    
    ;</script><!-- /ad -->

    This is appended even to your RSS feed.

    Since that’s added after the </body></html> either you added it (why would you add obfuscated junk…?) or your blog was hacked.

    Your files are almost certainly compromised, see

    http://www.pix2mail.com/wp-content/

    That URL should either give a blank output, give a 403 Forbidden error code, or show a directory listing. It should not give a PHP syntax error.

    Please read this updated boiler plate, you need to clean up your blog.

    Read this

    http://ocaoimh.ie/2008/06/08/did-your-wordpress-site-get-hacked/

    And then read it again.

    Read this too

    http://codex.wordpress.org/Hardening_WordPress

    Upgrade to the latest version if you have not already. You need to see if there are any users added to WordPress that you don’t know about/don’t belong there.

    You need to go through your files and find where the spammy links are being added. If it’s in wp-config.php or some other file, you’ll need to make sure that is cleaned up before you can consider yourself good file wise. Look everywhere and use fresh copies of your WordPress installation, plugins, and themes.

    Look at your posts and comments and see if there are any spammy links there. You can export your whole blog to WXR and then examine the whole thing in your favorite text editor.

    Look at your server’s log files. If you are on a shared server, get help from your provider. You need to identify if this was a compromise of WordPress or your server. If you do not identify the entrance which the attacker got in, odds are they will be back.

    Once you have cleaned up your hacked blog, harden it so this does not happen again.

    Good luck.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘my default feed address does not work!’ is closed to new replies.