• A hosting customer of ours reported that the Sucuri site scanning service identified a PHP “Headers already sent” problem with one of her pages, which it alarmingly flags as possibly caused “when the site is compromised by a script injection“.

    The actual cause turns out to be that the file at “/wp-content/plugins/wordpress-mobile-pack/themes/base/category.php” (in WordPress Mobile Pack version 2.1) begins with an invisible three-byte Unicode “byte order mark” (BOM), instead of beginning with “<?php”. This causes problems.

    The file was probably saved as Unicode with a BOM by the plugin author. Resaving it as plain text would probably fix it.

    https://wordpress.org/plugins/wordpress-mobile-pack/

  • The topic ‘themes/base/category.php begins with a Unicode "byte order mark"’ is closed to new replies.