Product Image browser and upload error

[owenlofi]

A friend is having a new problem with his site, it's never been an issue before.

When adding a product he chooses Insert/Edit image, then under image properties he chooses browse server.

Typically the page would be populated with the images he'd previously uploaded, but nothing is showing up.

 

The address is showing ...../FCKeditor/editor/filemanager/browser/default/browser.html?Type=Image&connector=connectors/php/connector.php

 

The page gives an error message at the bottom:

Line 115

Char: 2

Error: Object required

Code: 0

URL: ......FCKEditor/editor/filemanager/browser/default/frmresourcelist.html

 

Here is the text from around line 115 for frmresourcelist.html: (I think it is the line that starts varsCurrentFolderPath)

 

// Get the current folder path.

var oNode = fckXml.SelectSingleNode( 'Connector/CurrentFolder' ) ;

var sCurrentFolderPath = oNode.attributes.getNamedItem('path').value ;

var sCurrentFolderUrl = oNode.attributes.getNamedItem('url').value ;

 

// Add the Folders.

var oNodes = fckXml.SelectNodes( 'Connector/Folders/Folder' ) ;

for ( var i = 0 ; i < oNodes.length ; i++ )

{

var sFolderName = oNodes.attributes.getNamedItem('name').value ;

oListManager.AddFolder( sFolderName, sCurrentFolderPath + sFolderName + "/" ) ;

 

 

He says he hasn't made any recent changes or updates, so he's not sure why it stopped working.

Any help would be appreciated.

Thanks

[FIMBLE]

Some thing must of changed for this to stop working.

look at the top of a php file (Any) to make sure it does not have <?php /**/eval(base64_decode('aWYoZnVuY3Rpb25fZX there

Nic

[owenlofi]

Some thing must of changed for this to stop working.

look at the top of a php file (Any) to make sure it does not have <?php /**/eval(base64_decode('aWYoZnVuY3Rpb25fZX there

Nic

Opened index.php and it does say that at the top, plus a lot more...

[FIMBLE]

You have the honour of being hacked then.

Some steps you now need to carry out.

If you have a store back up, delete all files on the server and restore your site back up.

 

If you dont then you are going to have to decrypt the code http://www.opinionatedgeek.com/dotnet/tool...de/Default.aspx to find th elocation of the files that have been added, there could be upto 30 of them and they usually destroy the existing files.

 

Then you need to remove these,

Then you need to go over every single PHP file on your server and remove the code.

Then you need to rename your admin folder

Then you need to remove your admin / filemanager.php and all links to it

 

Nic