Explaining the recent script errors.
Posted: Sat Sep 08, 2012 2:56 am
First of all, I'd like to deeply apologize for the trouble and concern this has caused.
We've been getting the debugging errors because the first two lines of the index.php file had been injected with a javascript code. If it wasn't for those debugging errors, I might not have realized there was a problem. I then contacted my host about the problem, and they helped me remove the code injections and find the file responsible for causing the hack.
One of my other wordpress installs was out of date, and somehow let in a malicious file upload, which then started injecting every index.php file on my sites with the javascript. My host helped me remove all of them, but they left the space empty in the first 2 lines of the index.php files, which still caused our board and directory scripts to have header errors. I went in and removed the line spaces, so everything should work fine.
If anyone still get warnings on the domain or forums, it might just be your cache, since I double checked with view source, and there is nothing malicious in the files anymore.
Once again, I am so sorry for the trouble this has caused. I would recommend everyone to run a virus scan with their preferred programs just to be safe (if you use Windows).
HouseCall: http://housecall.trendmicro.com/
MBAM: http://www.malwarebytes.org/mbam.php
Microsoft Security Essentials: http://www.microsoft.com/Security_Essentials/
Spybot S&D: http://www.safer-networking.org/index2.html
SUPERAntiSpyware: http://www.superantispyware.com/superantispyware.html
I have Microsoft Security Essentials myself, and it worked really well.
And I would also recommend anyone with wordpress installs to keep them all updated, as well as all of your plugins.
We've been getting the debugging errors because the first two lines of the index.php file had been injected with a javascript code. If it wasn't for those debugging errors, I might not have realized there was a problem. I then contacted my host about the problem, and they helped me remove the code injections and find the file responsible for causing the hack.
One of my other wordpress installs was out of date, and somehow let in a malicious file upload, which then started injecting every index.php file on my sites with the javascript. My host helped me remove all of them, but they left the space empty in the first 2 lines of the index.php files, which still caused our board and directory scripts to have header errors. I went in and removed the line spaces, so everything should work fine.
If anyone still get warnings on the domain or forums, it might just be your cache, since I double checked with view source, and there is nothing malicious in the files anymore.
Once again, I am so sorry for the trouble this has caused. I would recommend everyone to run a virus scan with their preferred programs just to be safe (if you use Windows).
HouseCall: http://housecall.trendmicro.com/
MBAM: http://www.malwarebytes.org/mbam.php
Microsoft Security Essentials: http://www.microsoft.com/Security_Essentials/
Spybot S&D: http://www.safer-networking.org/index2.html
SUPERAntiSpyware: http://www.superantispyware.com/superantispyware.html
I have Microsoft Security Essentials myself, and it worked really well.
And I would also recommend anyone with wordpress installs to keep them all updated, as well as all of your plugins.