HELLLLP! Parse Error when trying to view my site!

I just tried to visit my site to check something & got this error:



Parse error: syntax error, unexpected T_STRING, expecting ‘,’ or ‘;’ in /home/brenn4/public_html/dreamsoy/index.php on line 103





I haven’t changed ANYthing in my store except adding products, afterwhich I checked the site & there were no issues.



HELP, PLEASE!!!



EDIT: I opened that page & found this code on line 103, which is the very last line of code in the doc, after the ?> . I have no idea what this is - I don’t recall ever seeing it before. Also I removed it & republished it & the site is appearing fine now, but does anyone have any idea what it could be or how it got there?:


yea have a worm on your server chewing through all your files, you need to replace all effected files with the original files…

:confused: OMG! Would that be on my host server, as in they need to address this, or is it just my own files? How do I find out which files have been infected? I have 7 sites on this account.



is this a normal file? It’s in the root of my eCommerce site & the filename is httpd.ini with the contents of:



[ISAPI_Rewrite]



RewriteRule /catalog/(.) /catalog/$1 [L]

RewriteRule /classes/(.
) /classes/$1 [L]

RewriteRule /skins/(.) /skins/$1 [L]

RewriteRule /payments/(.
) /payments/$1 [L]

RewriteRule /images/(.) /images/$1 [L]

RewriteRule /favicon.ico /favicon.ico [L]

RewriteRule /index.php(.
) /index.php$1 [L]

RewriteRule /image.php(.) /image.php$1 [L]

RewriteRule /admin.php(.
) /admin.php$1 [L]

RewriteRule ^(.*)$ /index.php?sef_rewrite=1 [I,L,QSA]

Yes, you are only able to run a virus scan on your own files. Your host will need to run a scan on the server itself.



Yes, that is a normal file.

I’ve run a virus scan on my computer & it came up clean. I will definitely be contacting my host. Thank you

I’m getting this error as well with 2.0.



Parse error: syntax error, unexpected ‘<’ in /home5/favortak/public_html/shop/prepare.php on line 173



I’m not sure exactly what needs to be removed or how to replace with original files…



an update with how you resolved would be appreciated.

Looks like its very similar to the one my cart got attacked with earlier during the week. Just out of interest what version cart are you using?



Tom

[QUOTE]

is this a normal file? It’s in the root of my eCommerce site & the filename is httpd.ini with the contents of:



[ISAPI_Rewrite]



RewriteRule /catalog/(.) /catalog/$1 [L]

RewriteRule /classes/(.
) /classes/$1 [L]

RewriteRule /skins/(.) /skins/$1 [L]

RewriteRule /payments/(.
) /payments/$1 [L]

RewriteRule /images/(.) /images/$1 [L]

RewriteRule /favicon.ico /favicon.ico [L]

RewriteRule /index.php(.
) /index.php$1 [L]

RewriteRule /image.php(.) /image.php$1 [L]

RewriteRule /admin.php(.
) /admin.php$1 [L]

RewriteRule ^(.*)$ /index.php?sef_rewrite=1 [I,L,QSA][/QUOTE]



I think this is a standard file, I have just looked at v2.0.4 which is only on my local pc and the file is there!



BarryH

Moreover if it is a host issue then maybe you can share them with us all…

[quote name=‘BarryH’]I think this is a standard file, I have just looked at v2.0.4 which is only on my local pc and the file is there!



BarryH[/QUOTE]



This file is used if you are running on IIS with the ISAPI_Rewrite library installed.

so, perhaps, this is an ignorant question - but what is the best way to resolve this?

UPDATE: This in fact turned out to be a trojan/virus on my computer that was capturing any passwords I used once it was on my computer. I had logged into my cPanel on that day (I run virus scans daily, so this one had a tiny window to do damage, but it turned out to be a damn big window - scenic!). so I had to change passwords all over the place & I had to comb through all files in my cPanel file manager. When I deleted some unknown files, the code re entered itself onto all my index pages, but it hasn’t happened since.



Here is a good thread on what it was that attacked my site for those who want to be prepared/aware:



[URL=“http://www.lunarforums.com/lunarpages_web_hosting_email_pc_security/gumblar_exploit_what_is_it_and_what_should_you_do-t52551.0.html”]http://www.lunarforums.com/lunarpages_web_hosting_email_pc_security/gumblar_exploit_what_is_it_and_what_should_you_do-t52551.0.html[/URL]