Page 1 of 1

php in streamed html source

Posted: Tue Jun 19, 2007 5:08 pm
by emwede
In the html-code (Browser->ricght clikck->Show page source) of each page i stream with my s9y from http://www.modlog.de i find the following lines of php-code:

Code: Select all

<?php
global $userdata;
if ($userdata) {
 echo "z_user_name=\"" . $userdata->display_name . "\";\n";
 echo "z_user_email=\"" . $userdata->user_email . "\";\n";
}
?>
z_post_title="<?php the_title();?>";
z_post_category="<?php $c=get_the_category();echo $c[0]->cat_name;?>";
Actually I thought those should not be there anymore but be interpreted by the php-module of my Apache. So where does that come from?

regards
Michael

Posted: Tue Jun 19, 2007 5:56 pm
by kleinerChemiker
this means, that php do not parse the files. so i think there is a problem with your apache/php installation.

Posted: Wed Jun 20, 2007 10:52 am
by garvinhicking
Hi!

This like like a WP hack, it seems your webpage is exploted/hacked.

Take down the host, make a forensic analysis of how your files were altered. If you are running other applications on your host, check if they were used as the intrusion/attack vector.

Regards,
Garvin