relish1227Is this a hack? A client notified me that they were not able to get to their site and, sure enough, there was a content encoding/compression error. I went to FTP and deleted both the HTTP Compression and WP Supercache plugins. The site showed up after deleting the HTTP Compression one.
However, now there is a TON of code appearing at the top of the page. Here's a tiny snippet:
"'; preg_match("||si",$str,$arr); return str_replace($arr[0],$links.$arr[0],$str); } function StrToNum($Str, $Check, $Magic) { $Int32Unit = 4294967296; $length = strlen($Str); for ($i = 0; $i < $length; $i++) { $Check *= $Magic; if ($Check >= $Int32Unit) { $Check = ($Check - $Int32Unit * (int) ($Check / $Int32Unit)); $Check = ($Check < -2147483648) ? ($Check + $Int32Unit) : $Check; } $Check += ord($Str{$i}); } return $Check; } function HashURL($String) { $Check1 = StrToNum($String, 0x1505, 0x21); $Check2 = StrToNum($String, 0, 0x1003F); $Check1 >>= 2; $Check1 = (($Check1 >> 4) & 0x3FFFFC0 )"
The only thing of note I can see in the code is:
$file = "http://toolbarqueries.google.com/search?client=navclient-auto&ch=$ch&features=Rank&q=info:$url"
Has anyone run into this? Any helped appreciated!!
t-p