WordPress.org

Ready to get started?Download WordPress

Forums

Hatch
[resolved] Some code is displaying on top of all my pages (7 posts)

  1. CarlosMezo
    Member
    Posted 10 months ago #

    This code is displaying on the top of all my pages:
    #74ed9f# if(empty($ygxeb)) { $ygxeb = " "; echo $ygxeb; } #/74ed9f#

    It did appear once time ago and I kill it updating the theme Hatch. but now there is again, and no new updates, so it keep showing.
    Ive search this code in all mi php pages, and I didnt found it.
    Also I reinstall wordpress 3.6

    Any help??
    Thanks!!

  2. CarlosMezo
    Member
    Posted 10 months ago #

    sorry, my web page is: http://www.carlosmezo.com

  3. CarlosMezo
    Member
    Posted 10 months ago #

    I think I just got hacked, I found in header.php Lot of missplaced text or code.
    Already solved!!

  4. mznbg
    Member
    Posted 10 months ago #

    Hi , same problem, but I use Joomla.
    Since 2013-08-28 on all my public-html webspace and there under the joomla template-folders every "index.php" have this new code inside (scroll down).
    I have all lot of domains and subdomains, to change or kill this code manual is a lot of work.
    So my question is:
    1. Why only the index.php
    2. What does this code.
    3. How is this possible (Because not every joomla-folder have a domain or subdomain which can be found by searchmachine and so on, so the server must be attacked ?).
    4. How can be included the code to the index.php?

    Here the code which I have found in the index.php

    [Code moderated. Please do not post hack code blocks in the forums.]

  5. esmi
    Forum Moderator
    Posted 10 months ago #

  6. voracity
    Member
    Posted 10 months ago #

    Hmm, my site just got attacked too. If you search Google with '74ed9f':

    https://www.google.com.au/#q=74ed9f

    This seems to be a pretty recent and widespread attack. Would really like to know how the attack is being carried out so I can make sure to prevent it happening again.

  7. Polundra
    Member
    Posted 10 months ago #

    I did clean install the day before yesterday and was hit also running WP3.6. All header.php files in three different LEGAL templates.
    Each of them had this extra code added:

    [hacked code removed - please don't post that here]

    Google for #74ed9f# +wordpress many hits will follow. I just removed my site from internet after creating a local backup.

Reply

You must log in to post.

About this Theme

About this Topic