how do I stop these errors from occuring?

[lordi]

Hello

I have a 3.8.4 version

It keeps on giving me errors SYNTAX ERROR in functions.php and in admincp with files adminfunctions.php

Parse error: syntax error, unexpected T_STRING in /home/content/l/x/x/xxx/html/forum/includes/functions.php on line 5725

I uploaded a clean version of 3.8.4 many many times...and each time it works for 2 days and then gives same error

I stopped all the hooks from config.php

And when I run a diagnosis test for suspicious files....Each time it gives me new suspicious files...and I keep on replacing with binary transfer mode

Does any any anybody have a clue of what am I passing through ????????????????????

[Lynne]

You don't upload php files in binary mode, you need to upload them in ASCII mode. Binary is for images, not text files.

[lordi]

Hey Lynne....

I did that (Uploaded files with ASCII and Images with BINARY) too and still

BTW...the first day I uploaded a clean new original copy of VB 384 it didn't show any suspicious files....but after 2 days it gives errors and shows many suspicious files

advise?

[Lynne]

Have you tried downloading one of these files and comparing them to a default file and seeing what the differences are? Or, have you looked at the last modification date on the files? Are you on shared hosting or your own server?

[Brother Malachi]

Someone is likely modifying and adding malicious code into your files.

[lordi]

I dun really know

I am on a VPS from NS1.us

today morning I got a Syntax error in Profile.php

it's driving me nuts :S:S:S

--------------- Added [DATE]1252046144[/DATE] at [TIME]1252046144[/TIME] ---------------

for instance, I found a suspicious file: private.php

I downloaded it from my forum and compared it to the original one

and found it bigger in size in 5 KB than the original one

attached below

--------------- Added [DATE]1252046272[/DATE] at [TIME]1252046272[/TIME] ---------------

for instance, I found a suspicious file: private.php

I downloaded it from my forum and compared it to the original one

and found it bigger in size in 5 KB than the original one

attached below.

[Lynne]

Go compare your downloaded file to the default file you have on your computer. SEe what the differences are. I'm guessing someone is accessing your server and doing it which means you need to talk to your host about getting your site secure.

[Brother Malachi]

Make sure none of the files are chmodded 777.
Change your password to something more secure. If you're running a VPS, first look in your ftp client the edit date of the files in question, then go into WHM and check the access logs. Find out who's editing you're files.
Also, some FTP clients display an "Owner/Group" column. Check and see what it says under there for the file.