Latest posts for the topic "Is it to late to fix?"

Is it to late to fix?

RCRacer — GMT

Hello, I have searched for the string public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
but nothing really refers to the error message that I can find even though there are hundreds of results.
Basically the advanced guest book at http://madminis.com/sign/ is now reporting errors and it was fine two days ago when I was there. The errors are in black text above the guestbook, so you have to highlight them.
I have replaced the file at /home2/madminis/public_html/sign/lib/gb.class.php with a backup I had.
I thought that may fix it, but it didn't.
There has been no changes to this guestbook for awhile. Is the database gone? Or is there hope?
[b]NOTE:[/b] Everything seems to be working correctly, even the admin area.
Any Hope to fix it? Was it hacked? I am not the best with database work, but will try anything. Thanks in advance.

JTD — GMT

Has your webhost updated there version of php?
http://proxy2.de/forum/viewtopic.php?t=4050&highlight=eval

Carbonize — GMT

Please post the EXACT error message you are getting.

Anonymous — GMT

This is it:
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
Parse error: parse error, unexpected

Anonymous — GMT

[quote="JTD"]Has your webhost updated there version of php?
http://proxy2.de/forum/viewtopic.php?t=4050&highlight=eval[/quote]
Not that I am aware.
PHP version 4.3.10

Carbonize — GMT

Hmmmmmmmmm did you download the guestbook from here or did your host supply it? Line 91 of my gb.class.php file says[code]$i=0;[/code]and comes in the middle of[code] function get_entries($entry,$last_entry) {
global $GB_UPLOAD, $GB_PG;
$entry = intval($entry);
$last_entry = intval($last_entry);
$img = new gb_image();
$img->set_border_size($this->db->VARS["img_width"], $this->db->VARS["img_height"]);
$LANG =& $this->db->LANG;
$id = $this->total-$entry;
$HOST = '';
$COMMENT = '';
$GB_ENTRIES = '';
$i=0;
$template['entry'] = $this->template->get_template($this->db->GB_TPL['entry']);
$template['com'] = $this->template->get_template($this->db->GB_TPL['com']);
$template['url'] = $this->template->get_template($this->db->GB_TPL['url']);
$template['icq'] = $this->template->get_template($this->db->GB_TPL['icq']);
$template['aim'] = $this->template->get_template($this->db->GB_TPL['aim']);
$template['email'] = $this->template->get_template($this->db->GB_TPL['email']);
$template['image'] = $this->template->get_template($this->db->GB_TPL['image']);[/code]

RCRacer — GMT

This is my line 91 with the host supplied guestbook.
[code] $MESSAGE = nl2br($row['comment']);[/code]
This is it with two lines on each side of it.

[code] while ($row = $this->db->fetch_array($result)) {
$DATE = $this->db->DateFormat($row['date']);
$MESSAGE = nl2br($row['comment']);
if ($this->db->VARS["smilies"] == 1) {
$MESSAGE = $this->db->emotion($MESSAGE);[/code]

Carbonize — GMT

God I hate it when hosts mangle perfectly good scripts and then leave the script writers to fix it. Download the guestbook from here and, after editing the config.inc.php file, upload it to a folder on your site. I'm guessing the MySQL tables have already been created for you. Actually I was wrong to post my line as you are using AG 2.2. Anyway I can send you the copy of gb.class.php I have if you want to replace yours.

Carbonize — GMT

Hmmmmmmmmmm have you editted any of the template files?

RCRacer — GMT

[quote="Carbonize"]Hmmmmmmmmmm have you editted any of the template files?[/quote]
No, I haven't messed with any of the template files. Please just send me the file if that will take care of it, thanks.

Carbonize — GMT

First I want to try something. Open up [b]lib/templates.class.php[/b] and find[code]$fd = fopen ($filename, "r");
$this->template[$tpl] = fread ($fd, filesize ($filename));
fclose ($fd);[/code]and replace it with[code]/*$fd = fopen ($filename, "r");
$this->template[$tpl] = fread ($fd, filesize ($filename));
fclose ($fd);*/
$this->template[$tpl] = file_get_contents($filename);[/code]

On second thoughts it wont fix it but still want to try it lol. Ok the error code is damn obscure as there is no eval code anywhere close. View the template files and lib files in FTP or cPanel and see if any of them, except any we have had you edit, have been modified recently.

Carbonize — GMT

Hm actually I have an idea. Login to admin and turn smileys off and see if the error code goes away. If so we have our start point and can work from their.

JTD — GMT

You are talking about the gb.class.php file? If so this is my line 91
[quote][color="green"] $COMMENT = '';[/color][/quote]

Carbonize — GMT

Mine is actually[code]$template['icq'] = $this->template->get_template($this->db->GB_TPL['icq']);[/code] but then I've probably edited this script. In fact I know I have edited this script as it's a version of 2.2. I am modifying for a client. The important line 91 though is his as he is the one with the error and I believe it relates to smileys.

RCRacer — GMT

[quote="Carbonize"]Hm actually I have an idea. Login to admin and turn smileys off and see if the error code goes away. If so we have our start point and can work from their.[/quote]
Didn't help.
Yea it is from the gb.class.php file.

JTD — GMT

I hav'nt edited mine and it is true version2.3.1. With the exception of some of your fix's.

RCRacer — GMT

This is the whole file.

[code] /**
* ----------------------------------------------
* Advanced Guestbook 2.2 (PHP/MySQL)
* Copyright (c)2001 Chi Kien Uong
* URL: http://www.proxy2.de
* ----------------------------------------------
*/

class guestbook {

var $total;
var $db;
var $template;

function guestbook($path='') {
$this->db = new guestbook_vars($path);
$this->db->getVars();
$this->total = 0;
$this->template =& $this->db->template;
}

function get_nav($entry=0) {
global $HTTP_SERVER_VARS;
$self = basename($HTTP_SERVER_VARS['PHP_SELF']);
$next_page = $entry+$this->db->VARS['entries_per_page'];
$prev_page = $entry-$this->db->VARS['entries_per_page'];
$navigation = '';
if ($prev_page >= 0) {
$navigation = " ".$this->db->LANG["NavPrev"]."\n";
}
if ($next_page < $this->total) {
$navigation = $navigation." ".$this->db->LANG["NavNext"]."\n";
}
return $navigation;
}

function show_entries($entry=0) {
$LANG =& $this->db->LANG;
$VARS =& $this->db->VARS;
$this->db->fetch_array($this->db->query("select count(*) total from ".$this->db->table['data']));
$this->total = $this->db->record["total"];
$TPL = $this->get_entries($entry,$this->db->VARS["entries_per_page"]);
$TPL['GB_TOTAL'] = $this->total;
$TPL['GB_JUMPMENU'] = implode("\n",$this->generate_JumpMenu());
$TPL['GB_TIME'] = $this->db->DateFormat(time());
$TPL['GB_NAVIGATION'] = $this->get_nav($entry);
$TPL['GB_HTML_CODE'] = ($this->db->VARS["allow_html"] == 1) ? $this->db->LANG["BookMess2"] : $this->db->LANG["BookMess1"];
eval("\$guestbook_html = \"".$this->template->get_template($this->db->GB_TPL['header'])."\";");
eval("\$guestbook_html .= \"".$this->template->get_template($this->db->GB_TPL['body'])."\";");
eval("\$guestbook_html .= \"".$this->template->get_template($this->db->GB_TPL['footer'])."\";");
return $guestbook_html;
}

function generate_JumpMenu() {
$menu_array[] = "";
$menu_array[] = "db->LANG["FormButton"]."\" class=\"input\">";
return $menu_array;
}

function get_entries($entry,$last_entry) {
$LANG =& $this->db->LANG;
$id = $this->total-$entry;
$HOST = '';
$COMMENT = '';
$GB_ENTRIES = '';
$i=0;
$template['entry'] = $this->template->get_template($this->db->GB_TPL['entry']);
$template['com'] = $this->template->get_template($this->db->GB_TPL['com']);
$template['url'] = $this->template->get_template($this->db->GB_TPL['url']);
$template['icq'] = $this->template->get_template($this->db->GB_TPL['icq']);
$template['aim'] = $this->template->get_template($this->db->GB_TPL['aim']);
$template['email'] = $this->template->get_template($this->db->GB_TPL['email']);
$result = $this->db->query("select * from ".$this->db->table['data']." order by id desc limit $entry, $last_entry");
while ($row = $this->db->fetch_array($result)) {
$DATE = $this->db->DateFormat($row['date']);
$MESSAGE = nl2br($row['comment']);
if ($this->db->VARS["smilies"] == 1) {
$MESSAGE = $this->db->emotion($MESSAGE);
}
if (!$row['location']) {
$row['location'] = "-";
}
$bgcolor = ($i % 2) ? $this->db->VARS["tb_color_2"] : $this->db->VARS["tb_color_1"];
$i++;
if ($row['url']) {
eval("\$URL = \"".$template['url']."\";");
} else {
$URL = '';
}
if ($row['icq'] && $this->db->VARS["allow_icq"]==1) {
eval("\$ICQ = \"".$template['icq']."\";");
} else {
$ICQ = '';
}
if ($row['aim'] && $this->db->VARS["allow_aim"]==1) {
eval("\$AIM = \"".$template['aim']."\";");
} else {
$AIM = '';
}
if ($row['email']) {
eval("\$EMAIL = \"".$template['email']."\";");
} else {
$EMAIL = '';
}
if ($this->db->VARS["allow_gender"]==1) {
$GENDER = ($row['gender']=="f") ? " " : " ";
}
if ($this->db->VARS["show_ip"] == 1) {
$hostname = ( eregi("^[-a-z_]+", $row['host']) ) ? "Host" : "IP";
$HOST = "$hostname: $row[host]\n";
}
$this->db->query("select * from ".$this->db->table['com']." where id='$row[id]' order by com_id asc");
while ($com = $this->db->fetch_array($this->db->result)) {
$com['comments'] = nl2br($com['comments']);
eval("\$COMMENT .= \"".$template['com']."\";");
}
eval("\$GB_ENTRIES .= \"".$template['entry']."\";");
$COMMENT = "";
$id--;
}
$TPL['GB_ENTRIES'] = $GB_ENTRIES;
return $TPL;
}

}

?>[/code]

Carbonize — GMT

ok it was nothing to do with smileys. I'm going through someone elses guestbook who has the same problem. I admit they don't know I am going through their guestbook but they should patch it. It's worrying that a search on google shows a lot of guestbook 2.2's with the same error.

Carbonize — GMT

I wonder if you are all on the same host :? anyway for a quick test (need to narrow down the problem) put // at the start of line 91 like so[code]//$MESSAGE = nl2br($row['comment']);[/code]

Carbonize — GMT

[url]http://www.google.com/search?hl=en&lr=&q=XXXXXXXXXXXXXXXXXXXXXXX[/url] scary

RCRacer — GMT

[quote="Carbonize"]I wonder if you are all on the same host :? anyway for a quick test (need to narrow down the problem) put // at the start of line 91 like so[code]//$MESSAGE = nl2br($row['comment']);[/code][/quote]
Same error I guess
[code]
Parse error: parse error, unexpected T_LNUMBER in /home2/madminis/public_html/sign/lib/gb.class.php(101) : eval()'d code on line 91
[/code]

RCRacer — GMT

[quote="Carbonize"][url]http://www.google.com/search?hl=en&lr=&q=XXXXXXXXXXXXXXXXXXXXXX[/url] scary[/quote]
I have alot of domain names on this server and don't' reconize any of them.

Carbonize — GMT

Thats because I'm starting to think the error is on line 101 and not 91. In fact I'm damn sure it is.

WELL BUGGER ME

Yes you have been hacked at some point. It's your url.php file thats been altered to a file that allows them to view all the files on your server. Open it and replace it's contents with[code]
[/code] and voila, problem gone.

Carbonize — GMT

[url]http://madminis.com/sign/templates/url.php[/url] VERY SCARY

RCRacer — GMT

Ok, the problem is gone, but every image is also.

Carbonize — GMT

All you changed was the url.php yes?

RCRacer — GMT

[quote="Carbonize"]All you changed was the url.php yes?[/quote]
Yes

ET — GMT

[quote="Carbonize"][quote]http://www.google.com/search?hl=en&lr=&q=XXXXXXXXXXXXXXXXX[/quote] scary[/quote]
That is!!! Probably is due to a hack attack....

Carbonize — GMT

it was. they had installed a file manager script and then used it to make files. On one they had made a fake bank login for phishing, on others email sending forms to send the emails from to hide their IP. It's a phishing expedition that we hopefully managed to catch and stop before it got to far.

RCRacer — GMT

[quote="RCRacer"]OK, the problem is gone, but every image is also.[/quote]
After changing that file, tlhe guestbook is not working correctly as the posts are not showing up, just the comments.
Is there a fix for this?

Carbonize — GMT

did you change ANYTHING at all during this thread other than the url.php file?

RCRacer — GMT

Carbonize — GMT

Shouldn't do but no harm in removing the //

RCRacer — GMT

That was it. Looking good now, Thanks for your time on that. I guess I need to get on the mailing list for updates.

Carbonize — GMT

When you find that list let me know lol.

Carbonize — GMT

Well that hacker did me a favour. I don't think he editted the files in question using the guestbook though as they didn't have the files chmod'd. Anyway I used his file explorer program to patch their guestbooks then fix the url.php file. I need a life (