Jump to content


Corporate Sponsors


Latest News: (loading..)

- - - - -

website down on thanksgiving weekend, help needed

parse error syntax error line 296

17 replies to this topic

#1 annetaussig

  • Community Member
  • 8 posts
  • Real Name:Anne

Posted 27 November 2011, 17:51

The website for our small business is down. There is an error message which says:

"Parse error: syntax error, unexpected $end in /home/squirrel/squirrelstuff.com/html/index.php on line 296"

What should be done to get the site back up and running? As you know, it is Thanksgiving weekend, and we are losing a lot of sales as a result of this issue.

#2 DunWeb

  • Community Sponsor
  • 10,466 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 27 November 2011, 17:52

Anne,

You will have to post the contents of the index.php file so we can see the code.



Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#3 annetaussig

  • Community Member
  • 8 posts
  • Real Name:Anne

Posted 27 November 2011, 18:01

How do I do that?

#4 annetaussig

  • Community Member
  • 8 posts
  • Real Name:Anne

Posted 27 November 2011, 18:02

We have not been able to access the admin page.

#5 DunWeb

  • Community Sponsor
  • 10,466 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 27 November 2011, 18:05

Anne,

You will need to log into your hosting account and download the file. Then, open it with a text editor and copy the files to this thread or attach the file to the thread so we can see it. However, judging by the database error in your admin side, you have more problems then just the index page.



Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#6 annetaussig

  • Community Member
  • 8 posts
  • Real Name:Anne

Posted 27 November 2011, 19:14

There is an issue with the upgrade from php v4 to v5

#7 annetaussig

  • Community Member
  • 8 posts
  • Real Name:Anne

Posted 27 November 2011, 19:41

this is the source code of the login page:

<html>
<head>
  <title>Administration Login</title>
  <style type="text/css">
BODY,TD {
margin: 0px;
font-size: 12px;
font-family: Verdana, Arial, Helvetica, sans-serif;
}
.MENU_TITLE {
background-color: #BBC3D3;
color: white;
font-weight: bold;
font-size: 12px;
font-family: Verdana, Arial, Helvetica, sans-serif;
}
  .NAV {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 11px;
}
  </style>
  <link href="includes/stylesheet.css" rel="stylesheet" type="text/css">
</head>
<body>
  <table border=0 cellpadding=0 cellspacing=0 width=100% height=100%>
   <tr>
	<td width=100% height=100% align="center" valign="middle">
	 <form action="https://www.mysite...LoginAction.php]" method="post" name="LoginAction">
  <input type="hidden" name="psRefer" value="<? echo $refer; ?>">
   <table border=0 cellpadding=4 cellspacing=0 width=450>
	<tr>
	 <td colspan="2" align="center" class="NAV"><img src="http://www.mysite.com/images/oscommerce.gif" alt="Company Name" width="204" height="50" vspace="0" border="0">

	


  </td>
	</tr>
	   <tr>
		<td align="right" width=40% class="menu_title">Administrator's Login</td>
  <td width=60%  class="menu_title"> </td>
	   </tr>
	   <tr>
		<td align="right" width=40%>Administrator Username:</td>
		<td align="left" width=60%><input type="text" name="psName" style="width: 200px" value=""></td>
	   </tr>
	   <tr>
		<td align="right" width=40%>Administrator Password:</td>
		<td align="left" width=60%><input type="password" name="psPassword" style="width: 200px" value=""></td>
	   </tr>
	   <tr>
		<td align="right" width=40%><input type="submit" name="admin_login_submit" value="Login"></td>
		<td align="left" width=60%><input type="reset" name="admin_login_reset" value="Clear"></td>
	   </tr>
	  </table>
	 </form>
	</td>
   </tr>
  </table>
</body>
</html>

Edited by Jan Zonjee, 27 November 2011, 20:25.


#8 FIMBLE

  • Community Member
  • 6,567 posts
  • Real Name:Nic
  • Gender:Male

Posted 27 November 2011, 21:52

Thats not osc code you have posted.
Nic
Sometimes you're the dog and sometimes the lamp post

My Contributions

#9 Taipo

  • Community Member
  • 751 posts
  • Real Name:Te Taipo
  • Gender:Male

Posted 28 November 2011, 00:08

You are probably going to need someone to FTP into your site for you and fix the issue with the corrupted code. Its the actual content of the file that is needed to be able to determine the issue, not so much the source code of the page once a browser has loaded it.

That said, as FIMBLE stated, that source code above is not the source code from the standard admin login page of any osCommerce based webcart system. It looks more like the source code of an adapted admin login page.

My guess is its an addon of some sort that came out back in the day when people were trying to address the admin login authenticaton bypass exploit that hit the net sometime at the end of last year?
- Stop Oscommerce hacks dead in their tracks with osC_Sec (see discussion here)
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here

#10 Debs

  • Community Member
  • 133 posts
  • Real Name:Debs
  • Gender:Female
  • Location:Fargo, ND UNITED STATES

Posted 28 November 2011, 01:26

Hi Anne,
It looks like your code is messed up. Perhaps a missing } in index.php (add just before line 296 for testing)

also, when viewing your page http://........com/specials.php
This notice was received: FATAL ERROR: register_globals is disabled in php.ini, please enable it!
If you really need it, try turning it back on or flag it on.
Also go to your admin >> Configuration, and reset your SEO URLs Cache
It looks like your database may be messed up some too...
Were you hacked?

#11 usernamenone

  • Community Member
  • 2,175 posts
  • Real Name:Lola
  • Gender:Female
  • Location:United States

Posted 28 November 2011, 02:19

View PostTaipo, on 28 November 2011, 00:08, said:

You are probably going to need someone to FTP into your site for you and fix the issue with the corrupted code. Its the actual content of the file that is needed to be able to determine the issue, not so much the source code of the page once a browser has loaded it.

That said, as FIMBLE stated, that source code above is not the source code from the standard admin login page of any osCommerce based webcart system. It looks more like the source code of an adapted admin login page.

My guess is its an addon of some sort that came out back in the day when people were trying to address the admin login authenticaton bypass exploit that hit the net sometime at the end of last year?

They are using an older version of oscommerce from when we had to secure admin ourselves. That code is from the add on from anchor555 There wan't a hack but probably a PHP upgrade on the hosted computer. annetaussig will probably need to update to the present oscommerce version.

#12 DunWeb

  • Community Sponsor
  • 10,466 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 28 November 2011, 02:25

A site review has concluded that the site is MS2 and was running until the hosting provider updated to PHP 5.3 and MySQL 5.2. The prognosis is not good as the code is not compatible with the server upgrades.



Chris

Edited by DunWeb, 28 November 2011, 02:30.

:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#13 usernamenone

  • Community Member
  • 2,175 posts
  • Real Name:Lola
  • Gender:Female
  • Location:United States

Posted 28 November 2011, 02:57

You will need to download the current version and follow the update instructions found in the upgrade_guide.pdf

#14 DunWeb

  • Community Sponsor
  • 10,466 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 28 November 2011, 05:12

View Postusernamenone, on 28 November 2011, 02:57, said:

You will need to download the current version and follow the update instructions found in the upgrade_guide.pdf


There is not update guide from MS2 to 2.3.1



Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#15 Taipo

  • Community Member
  • 751 posts
  • Real Name:Te Taipo
  • Gender:Male

Posted 28 November 2011, 05:18

Technically there is from 2.2 to 2.3.1.
http://www.oscommerc...2/Upgrade+Guide

But it would take several hours plus a moderate level of understanding of PHP and MYSQL needed to be able to make the changes.

The other issue is whether or not there are 2.3.1 versions of the addons being used.

Edited by Taipo, 28 November 2011, 05:19.

- Stop Oscommerce hacks dead in their tracks with osC_Sec (see discussion here)
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here

#16 Taipo

  • Community Member
  • 751 posts
  • Real Name:Te Taipo
  • Gender:Male

Posted 28 November 2011, 05:20

...and a couple of gallons of freshly brewed coffee...
- Stop Oscommerce hacks dead in their tracks with osC_Sec (see discussion here)
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Ignore this link - just a honeypot site to test my ideas out for osC_Sec and allow the site to be picked up by attackers.
- Fix the admin login bypass exploit here

#17 DunWeb

  • Community Sponsor
  • 10,466 posts
  • Real Name:Chris Dunn
  • Gender:Male
  • Location:Tecumseh, Ontario, Canada N8N 1X8

Posted 28 November 2011, 05:45

View PostTaipo, on 28 November 2011, 05:18, said:

Technically there is from 2.2 to 2.3.1.
http://www.oscommerc...2/Upgrade+Guide

But it would take several hours plus a moderate level of understanding of PHP and MYSQL needed to be able to make the changes.

The other issue is whether or not there are 2.3.1 versions of the addons being used.

IMO, it is easier to create a new site with v2.3.1 than to try to update from a v2.2 site. Then as you said, there is no update path for all of the added contributions.



Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

:|: Click Here to learn how I can help you with custom coding, add ons, security and templates :|:

:|: Need an Area Calculator, Pre-Paid Account, Virtual Pin, Auction or Layaway Add on ? Click Here :|:

#18 toyicebear

  • Community Sponsor
  • 5,694 posts
  • Real Name:Nick
  • Location:World Citizen

Posted 28 November 2011, 08:37

Doing an upgrade following the upgrade docs does not give you a complete 2.31 shop, you get a "mixed" version... ie. you can still use add-ons made for 2.2 without too much hazzle while you can not use a 2.31 addon without having to modify its code to work with your "bastardized" osc version.

Edited by toyicebear, 28 November 2011, 08:37.

Basics for osC 2.2 Design - Basics for Design V2.3+ - Seo & Sef Url's - Meta Tags for Your osC Shop - Steps to prevent Fraud... - MS3 and Team News... - SEO, Meta Tags, SEF Urls and osCommerce

Check out my profile [click here] for information on professional services, custom coding, templates, SEO optimization, modifications, commercial support and help.