PDA

View Full Version : How do I fix this error message?


theforumist
01-30-2012, 09:07 PM
Everytime I log in (and I'm assuming everyone else who visits my site) I get the following error message (mind you, vbulletin doesn't even boot):

Unable to add cookies, header already sent.
File: /homepages/45/d250243461/htdocs/LaBarncia/index.php(1) : eval()'d code
Line: 7


I'm curious to know what causes this and how would I go about fixing it?

EDIT: This doesn't happen when you visit the site from a phone...atleast it hasn't on my phone.

Max Taxable
01-30-2012, 09:10 PM
Usually when I have seen this it's due to added characters in the php file due to using a editor such as plain notepad for editing the file.

Did this only recently start happening?

Can you provide a link for checking out the page source code?

kh99
01-30-2012, 09:11 PM
What does your index.php look like? The error seems to be saying that the problem is with code eval()'d on line 1, which is odd.

Max Taxable
01-30-2012, 09:11 PM
What does your index.php look like? The error seems to be saying that the problem is with code eval()'d on line 1, which is odd.That's what's got me thinking, a extra character.

kh99
01-30-2012, 09:12 PM
Yeah, that's a good thought - I posted before reading your repsonse.

theforumist
01-30-2012, 09:15 PM
The site has been up for nearly a year now and it has just now started happening. I'm away from my FTP accessible computer at the moment, but when I get home, I'll post that first section of the index.

Max Taxable
01-30-2012, 09:18 PM
The site has been up for nearly a year now and it has just now started happening. I'm away from my FTP accessible computer at the moment, but when I get home, I'll post that first section of the index.This tells me it is an issue with a change you recently made.

Editing php files with plain notepad messes them up, puts in extra characters you cannot see.

theforumist
01-30-2012, 09:34 PM
This tells me it is an issue with a change you recently made.

Editing php files with plain notepad messes them up, puts in extra characters you cannot see.

I haven't added anything to the site in over a month. I think the last thing I did on there was add and remove forums and change the Human Verification settings.

kh99
01-30-2012, 09:38 PM
I haven't added anything to the site in over a month. I think the last thing I did on there was add and remove forums and change the Human Verification settings.

Yeah, that seems like an odd error to get from the "extra character" thing because normally the first line is not an eval(). But looking at the file should tell us something.

theforumist
01-30-2012, 09:41 PM
What would you guys like to see, lines what through what? Mind you if it does contain any site specific data, I'll remove it.

EDIT: To answer the question about notepad and wordpad, I use an HTML editor for PHP, XML, and HTML files.

kh99
01-30-2012, 09:57 PM
That's hard to say - based on the error message I'd only need to see the first line, but if that looks OK I'd probably want to see more. I understand you might not want to post it all.

Max Taxable
01-30-2012, 09:58 PM
I checked the links in your signature and saw the errors both on your WordPress installation and your vBulletin. However, you're also loading a worm on people's browsers, so now I am suspecting a hacker.

theforumist
01-30-2012, 11:24 PM
Great...ill have my host do a sweep of the server. This is getting old.

--------------- Added 1327972754 at 1327972754 ---------------

Anyone know how to go about resolving this issue? I sent an email to my hosts support center and I'm hoping that they can take care of it. If they can't, how would I fix this?

Simon Lloyd
02-01-2012, 06:19 PM
I'm guessing you've got eval(base64 code somewhere in your php files, it usually happens from a poorly secured mod that you've uploaded or already infected php files, you need to search your files on your server for that, usually at the top or the bottom of the file, you need to remove that line on EVERY file thats infected and find the file thats either pre-infected or has the code for replicating it.

Think hard what you did recently or uploaded to your server recently.

--------------- Added 1328124470 at 1328124470 ---------------

Of course you could just have some white space at the beginning of your last edited php file :)

Google says both your sites are safe!

Eslob
02-04-2012, 08:06 AM
reupload the php files, and repair database.

if this still happen then i think this have something with apache and php version.