"Blank" Index After Server/PHP Updates

[hawken]

Hi, due to my website constantly getting hacked and malicious files being uploaded to /images directory, my webhost has updated to PHP 5 and run it as CGI through suPHP.

 

Now, my website is blank, showing only the background image: www.blocktapes.com (The admin does seem to work fine though, or at least load)

 

PHP Version 5.2.17

MySQL 4.1.22-standard

Oscommerce says version 2.2 RC1, but I remember manually updating versions a couple times, and that never changed. This is a heavily modified version, so hopefully upgrading to 2.2.1 or something can be avoided.

 

If anyone has any solutions, I would really appreciate it.

 

Thank you.

[germ]

Try to get the site to produce an error message.

 

In /includes/application_top.php change rhis line:

 

 error_reporting(E_ALL & ~E_NOTICE);

To:

 

 error_reporting(E_ALL | E_STRICT);

Then access the site normally.

 

If you don't see anything don't let that fool you.

 

<right-click> then "View source", then look for any error messages in the page source.

 

There is output to the browser, but not past the header.php file.

[hawken]

Thanks Germ! Here are the errors, which one might be the cause?

 

Strict Standards: define() [function.define]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/application_top.php on line 72

Notice: Constant FEATURED_PRODUCTS_DISPLAY already defined in /home/blocktap/public_html/includes/application_top.php on line 72

Strict Standards: setcookie() [function.setcookie]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/functions/general.php on line 1227

Warning: Cannot modify header information - headers already sent by (output started at /home/blocktap/public_html/includes/application_top.php:72) in /home/blocktap/public_html/includes/functions/general.php on line 1227

Strict Standards: session_start() [function.session-start]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/functions/sessions.php on line 102

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/blocktap/public_html/includes/application_top.php:72) in /home/blocktap/public_html/includes/functions/sessions.php on line 102

Strict Standards: date() [function.date]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/languages/english.php on line 321

Strict Standards: date() [function.date]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/languages/english.php on line 321

Strict Standards: tep_update_whos_online() [function.tep-update-whos-online]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/functions/whos_online.php on line 112

Notice: Undefined index: HTTP_REFERER in /home/blocktap/public_html/includes/functions/whos_online.php on line 112

Strict Standards: main() [function.main]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/header_tags.php on line 34

Notice: Undefined index: manufacturers_id in /home/blocktap/public_html/includes/header_tags.php on line 34

Strict Standards: GetCanonicalURL() [function.getcanonicalurl]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/blocktap/public_html/includes/functions/header_tags.php on line 172

Notice: Undefined variable: args in /home/blocktap/public_html/includes/functions/header_tags.php on line 172

[germ]

This one is probably the killer:

 

Warning: Cannot modify header information - headers already sent by (output started at /home/blocktap/public_html/includes/application_top.php:72) in /home/blocktap/public_html/includes/functions/general.php on line 1227

The error is /includes/application_top.php line 72

[hawken]

This one is probably the killer:

 

 

The error is /includes/application_top.php line 72

 

Thanks! Here is the code for 72: Does that look incorrect somehow?

 

// set the application parameters

$configuration_query = tep_db_query('select configuration_key as cfgKey, configuration_value as cfgValue from ' . TABLE_CONFIGURATION);

while ($configuration = tep_db_fetch_array($configuration_query)) {

define($configuration['cfgKey'], $configuration['cfgValue']);

[germ]

I don't know how that can cause an error?

:unsure:

 

I'd do a backup of the database in the admin and look for malicious code in the database.

[satish]

/public_html/includes/functions/general.php on line 1227

 

check your general.php it might be have some white spaces after ?>

 

 

Satish

[hawken]

There was a line of space under it, but deleting it didn't change anything. Line 1227 is:

 

function tep_setcookie($name, $value = '', $expire = 0, $path = '/', $domain = '', $secure = 0) {

setcookie($name, $value, $expire, $path, (tep_not_null($domain) ? $domain : ''), $secure);