website down on thanksgiving weekend, help needed
#1
Posted 27 November 2011, 17:51
"Parse error: syntax error, unexpected $end in /home/squirrel/squirrelstuff.com/html/index.php on line 296"
What should be done to get the site back up and running? As you know, it is Thanksgiving weekend, and we are losing a lot of sales as a result of this issue.
#2
Posted 27 November 2011, 17:52
You will have to post the contents of the index.php file so we can see the code.
Chris
:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:
:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:
#3
Posted 27 November 2011, 18:01
#4
Posted 27 November 2011, 18:02
#5
Posted 27 November 2011, 18:05
You will need to log into your hosting account and download the file. Then, open it with a text editor and copy the files to this thread or attach the file to the thread so we can see it. However, judging by the database error in your admin side, you have more problems then just the index page.
Chris
:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:
:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:
#6
Posted 27 November 2011, 19:14
#7
Posted 27 November 2011, 19:41
<html>
<head>
<title>Administration Login</title>
<style type="text/css">
BODY,TD {
margin: 0px;
font-size: 12px;
font-family: Verdana, Arial, Helvetica, sans-serif;
}
.MENU_TITLE {
background-color: #BBC3D3;
color: white;
font-weight: bold;
font-size: 12px;
font-family: Verdana, Arial, Helvetica, sans-serif;
}
.NAV {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 11px;
}
</style>
<link href="includes/stylesheet.css" rel="stylesheet" type="text/css">
</head>
<body>
<table border=0 cellpadding=0 cellspacing=0 width=100% height=100%>
<tr>
<td width=100% height=100% align="center" valign="middle">
<form action="https://www.mysite...LoginAction.php]" method="post" name="LoginAction">
<input type="hidden" name="psRefer" value="<? echo $refer; ?>">
<table border=0 cellpadding=4 cellspacing=0 width=450>
<tr>
<td colspan="2" align="center" class="NAV"><img src="http://www.mysite.com/images/oscommerce.gif" alt="Company Name" width="204" height="50" vspace="0" border="0">
</td>
</tr>
<tr>
<td align="right" width=40% class="menu_title">Administrator's Login</td>
<td width=60% class="menu_title"> </td>
</tr>
<tr>
<td align="right" width=40%>Administrator Username:</td>
<td align="left" width=60%><input type="text" name="psName" style="width: 200px" value=""></td>
</tr>
<tr>
<td align="right" width=40%>Administrator Password:</td>
<td align="left" width=60%><input type="password" name="psPassword" style="width: 200px" value=""></td>
</tr>
<tr>
<td align="right" width=40%><input type="submit" name="admin_login_submit" value="Login"></td>
<td align="left" width=60%><input type="reset" name="admin_login_reset" value="Clear"></td>
</tr>
</table>
</form>
</td>
</tr>
</table>
</body>
</html>
Edited by Jan Zonjee, 27 November 2011, 20:25.
#8
Posted 27 November 2011, 21:52
Nic
#9
Posted 28 November 2011, 00:08
That said, as FIMBLE stated, that source code above is not the source code from the standard admin login page of any osCommerce based webcart system. It looks more like the source code of an adapted admin login page.
My guess is its an addon of some sort that came out back in the day when people were trying to address the admin login authenticaton bypass exploit that hit the net sometime at the end of last year?
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here
#10
Posted 28 November 2011, 01:26
It looks like your code is messed up. Perhaps a missing } in index.php (add just before line 296 for testing)
also, when viewing your page http://........com/specials.php
This notice was received: FATAL ERROR: register_globals is disabled in php.ini, please enable it!
If you really need it, try turning it back on or flag it on.
Also go to your admin >> Configuration, and reset your SEO URLs Cache
It looks like your database may be messed up some too...
Were you hacked?
#11
Posted 28 November 2011, 02:19
Taipo, on 28 November 2011, 00:08, said:
That said, as FIMBLE stated, that source code above is not the source code from the standard admin login page of any osCommerce based webcart system. It looks more like the source code of an adapted admin login page.
My guess is its an addon of some sort that came out back in the day when people were trying to address the admin login authenticaton bypass exploit that hit the net sometime at the end of last year?
They are using an older version of oscommerce from when we had to secure admin ourselves. That code is from the add on from anchor555 There wan't a hack but probably a PHP upgrade on the hosted computer. annetaussig will probably need to update to the present oscommerce version.
#12
Posted 28 November 2011, 02:25
Chris
Edited by DunWeb, 28 November 2011, 02:30.
:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:
:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:
#13
Posted 28 November 2011, 02:57
#14
Posted 28 November 2011, 05:12
usernamenone, on 28 November 2011, 02:57, said:
There is not update guide from MS2 to 2.3.1
Chris
:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:
:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:
#15
Posted 28 November 2011, 05:18
http://www.oscommerc...2/Upgrade+Guide
But it would take several hours plus a moderate level of understanding of PHP and MYSQL needed to be able to make the changes.
The other issue is whether or not there are 2.3.1 versions of the addons being used.
Edited by Taipo, 28 November 2011, 05:19.
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here
#16
Posted 28 November 2011, 05:20
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here
#17
Posted 28 November 2011, 05:45
Taipo, on 28 November 2011, 05:18, said:
http://www.oscommerc...2/Upgrade+Guide
But it would take several hours plus a moderate level of understanding of PHP and MYSQL needed to be able to make the changes.
The other issue is whether or not there are 2.3.1 versions of the addons being used.
IMO, it is easier to create a new site with v2.3.1 than to try to update from a v2.2 site. Then as you said, there is no update path for all of the added contributions.
Chris
:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:
:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:
#18
Posted 28 November 2011, 08:37
Edited by toyicebear, 28 November 2011, 08:37.
Check out my profile [click here] for information on professional services, custom coding, templates, SEO optimization, modifications, commercial support and help.














