Pixelpost isn't working anymore

[dgoering]

Hey, I left for a week of vacation and when I got back I found that my pixelpost wasn't working anymore, it gives me this error: "Parse error: syntax error, unexpected T_STRING, expecting ',' or ';' in ****/pixelpost/index.php on line 295"
Any ideas what this could be or which file I would have to edit?
My photoblog has been down for over a week now :-/

[Dennis]

please copy your index.php file from the folder /pixelpost/ by FTP, zip it up and send it to me for inspection.

Thanks.

[dgoering]

Sent you a PM with the File, thx!

[Dennis]

You've got some strange stuff in your index.php, something that is definitely not ours.

You should talk to your hoster because the server might have been hacked and someone most likely injected code in all the index files (be it index.php or index.html).

I would suggest the following steps:

1) download the whole package from our server
2) copy the file includes/pixelpost.php from your site to your computer.
3) just to make sure, copy all files and folders from your Pixelpost install on your site to your PC (backup)
4) delete all files from pixelpost from your site except the folder images and thumbnails
5) upload the contents of the package you downloaded in step 1 to your server. Omit the images and thumbnails
6) edit pixelpost-sample.php located in the includes folder and insert the information from the pixelpost.php you copied in step 2. Just fill in all the credentials, do not copy the whole file contents
7) rename this file to pixelpost.php and upload this file in the includes folder.
8) gotto your adminpanel, since you where on 1.7 you might have to upgrade your install to 1.71
9) if that is finished you'll be good to go

[Rodney-E2]

Dennis+,

Do you know if their is a string that is used to create this? Wanted to check and see if we have this in all our mod-sec rules here at Eleven2 to prevent anything like this for our customers?

[Dennis]

Rodney, it seems to be a html injection to a site hosting malware. I'm not posting this on the forum ;)

[Rodney-E2]

Oviously, yeah, do not post it.
If you can PM it to me, I would love to get it in our mod-sec rulesheets here at eleven2.

[dgoering]

Although what is strange is that I followed the URL that was injected and it seems like a very normal Blog, it doesn't look harmfull at all.
Maybe it was a problem my webhoster had with the Permissions of the apache or something, so that another user of the hoster had temporary writing permissions to my files or something (probably unlikely) but the URL seemed to be clean...

[Vee]

This is also happening to me a lot!
I've re-installed a few times and the bang a few days later I'm getting parse errors..

Is this something worth changing hosting over?

[Rodney-E2]

If you are constantly getting hacked and are staying up to date with PP, then ya it might be good to look into switching.
With us, you will be as safe as we can get as we specifically engineer our services to ensure E2 works the best, and if the Pixelpost team will let us know of any hacks, we will make a effort to put those in all our ACL's to prevent against any attacks or such.