PHP Parse Error

[mnapiork]

I've been running two sites with CMS Made Simple for about a year now without any problems and suddenly both websites are giving me the below error.

Parse error: parse error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';' in C:\hosting\webhost4life\member\mnapiork\yum\index.php on line 77

Any ideas?

[Dee]

Strange - it's impossible to tell what's going on though, without knowing which version of CMS Made Simple you're using or seeing the code of that index.php around line 77....

[mnapiork]

I'm running $CMS_VERSION = "1.2.3";

I don't know if my host overwrote a file or whether someone hacked into my account and changed something.  I'm just curious whether anyone else using CMS Made Simple is experiencing this.

[mnapiork]

This is what is written around line 77 of index.php.  Is this normal?

[Dee]

No, that doesn't look like the normal code that should be in the file - download the 1.2.3 cms package and upload it again, overwriting the files on the server. While at it, after that I'd make a backup and upgrade to 1.3.1

[mnapiork]

Thanks.  I guess someone hacked into my account and added code.

[mnapiork]

It's actually a javascript function just after the closing tag.  See below:

Code: Select all

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

[Pierre M.]

Thanks.  I guess someone hacked into my account and added code.

Sure. See erase-destroy : http://forum.cmsmadesimple.org/index.ph ... #msg114458
And remember not to run obsolete, known unsecure, unsupported versions.

Pierre M.

[mnapiork]

Well, I was hacked for sure!

Somehow the hacker figured out my ftp username and password and inserted malicious code into the index pages of my sites and also deleted many other index pages completely.

My antivirus picked this up in the index file of one of my sites: Trojan program Trojan-Clicker.HTML.IFrame.rw

I viewed the ftp connection log files and the IP address was from Russia (77.221.133.198).

I still would like to figure out how the hacker got in.  It's really bugging me!!!

[Pierre M.]

I still would like to figure out how the hacker got in.

As you were using an obsolete, known unsecure, unsupported version the cracker had only to chose a well known exploit.
Keep exposed software uptodate and see http://wiki.cmsmadesimple.org/index.php ... mall_Guide

Pierre M.

[iberkner]

I just want to put it out there that of my sites got hacked as well by the same crooks.  Would love to know who and how...

xxxxxxxxxxxxxxxxxxxxxxxxxxxx

[Dr.CSS]

It's a know vulnerability that has been fixed, hope you updated to latest ver...