HUGE Error in the Admin Login screen

[Alpdog14]

I have a huge error when I come to my admin login screen:

Code: Select all

c1608e58b7a40647381b4667630bf061


Notice:  Undefined index:  p in /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php on line 118

82d58bfc8dc7a2fa985939b01d5b694f
69175bee376c12eba6ddbd1f632a7f10


Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 161

Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 164

Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 167

Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 168

Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 171

Warning: Cannot modify header information - headers already sent by (output started at /home/content/b/o/x/boxforminc/html/admin/lang/net__af_ZA.nls.php:101) in /home/content/b/o/x/boxforminc/html/lib/classes/class.admintheme.inc.php on line 176

Please inform me on how to fix this.

[Nullig]

You've been hacked.

If you'd searched the forums, you'd already have been aware of this.

Nullig

[Blikkie]

You've been hacked

I have some doubt if only CMSMS is hacked.

I had the same problem with my 1.2.4. version. The only difference was it complained about a language file. When checking files throug ftp I stumbled accross some files which looked like new_"orignal filename here".php  and ext_"original filename here".php
Now if I would only have found these in CMSMS directories I would believe it had something to do with the in other threads mentioned hacks due to a security issue in 1.2.4.
But I also found them in almost all other CMSMS and also NON CMSMS related directories containing php code. Opening a page from that directory resulted in the same behavior.

I solved the problem by deleting all (after backing-up images etc.) CMSMS directories and copy a new install of 1.3 back. Ran upgrade.php from the install directory and my site was up and running again.
From the other directories I just deleted the new_... and ext_.... files. Worked fine for my files.


Hereunder the code from a page called "new__ru_RU.nls.php" found in my admin directory. Perhaps usefull.

Code: Select all

xxxxxxxxxxxxxxxxxxxxxxx 

[RonnyK]

The fix is to delete the admin-folder and restore that from the installation.....

Then upgrade to latest stable.

Ronny

[Blikkie]

That did not work in my case.
Every directory containing php was "infected" with those files and thus responded with the error message as in the code posted above. In my case I had to delete the complete site (not the dbase!!) and re-install.

I assume another time consuming option would be to manually delete the files from every single directory  but I chose to just do a clean install instead.