• Resolved ronybigsoc

    (@ronybigsoc)


    I recently logged onto my blog and overnight it just messed up. Now when I just try to visit the page I get this error: HELP ME!

    Parse error: syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /hsphere/local/home/ronybig0/religiontranscends.com/wp-includes/classes.php on line 807

Viewing 5 replies - 16 through 20 (of 20 total)
  • ‘tmp_lkojfghx’

    My line 807 contains the above tmp info over and over.

    @ Ramirez_fabian – looks like you might have been hacked. I entered that term in Google and it returned countless results with everyone mentioning they’ve been hacked.

    Check you code around that line number for something like: base64_decode()

    If that’s there, it’s almost a sure thing you’ve been hacked.

    Our company provides security upgrades for WordPress bloggers, but I’ll be honest, nothing is 100% full proof.

    @ garei – I know people who host on GoDaddy and have those plugins with no issues. It is possible your site was hacked. Also, do you have any backup copies of your database on the server (check areas like your wp-content/db-backup or something)? If someone can find that, they could get access to your blog. You might want to try some security enhancements to harden your WordPress install. Maybe it will detour the attacker.

    My team and I figured this one out, here’s the solution and we are offering our services to those that don’t feel like fixing them themselves. Nothing is lost, it just takes a bit to put the pieces all back together. First thing though is to look on your computer for a keylogger program that sends your wordpress password to the script kiddies. https://www.designandpromote.com/parse-error-syntax-error-unexpected-t_variable-solved/

    @ramirez_fabian

    Yes, the site has been hacked. For my client, I had a backup of the posts. So I deleted the WP install, re-installed it and imported the Posts.

    That “tmp_….” stuff you see is the haacked code. I am not sure what it does. I read in some forums that it was serving up ads and stuff on the pages.

    Also, I contacted the Hosting Company to figure out how the script was uploaded, because the client had a very complex alpha numeric password. They looked at the logs and said the FTP pwd was keyed in, so someone had access to that password.

    I am not sure how the hacker or hacking code got that password. So I had the client change the Control Panel and FTP password after I re-installed the software.

Viewing 5 replies - 16 through 20 (of 20 total)
  • The topic ‘Parse error: syntax error, unexpected … on line 807’ is closed to new replies.