php in streamed html source

Found a bug? Tell us!!
Post Reply
emwede
Regular
Posts: 58
Joined: Thu Jun 22, 2006 10:38 am
Contact:

php in streamed html source

Post by emwede »

In the html-code (Browser->ricght clikck->Show page source) of each page i stream with my s9y from http://www.modlog.de i find the following lines of php-code:

Code: Select all

<?php
global $userdata;
if ($userdata) {
 echo "z_user_name=\"" . $userdata->display_name . "\";\n";
 echo "z_user_email=\"" . $userdata->user_email . "\";\n";
}
?>
z_post_title="<?php the_title();?>";
z_post_category="<?php $c=get_the_category();echo $c[0]->cat_name;?>";
Actually I thought those should not be there anymore but be interpreted by the php-module of my Apache. So where does that come from?

regards
Michael
kleinerChemiker
Regular
Posts: 765
Joined: Tue Oct 17, 2006 2:36 pm
Location: Vienna/Austria
Contact:

Post by kleinerChemiker »

this means, that php do not parse the files. so i think there is a problem with your apache/php installation.
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Hi!

This like like a WP hack, it seems your webpage is exploted/hacked.

Take down the host, make a forensic analysis of how your files were altered. If you are running other applications on your host, check if they were used as the intrusion/attack vector.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Post Reply