Strange warning: file(https://drvk.googlecode.com/files/k.txt)

  • Our blog (https://nebgh.org/blog/)has a warning both on the front end and the log-in page, which we can’t decipher:

    Warning: file(https://drvk.googlecode.com/files/k.txt) [function.file]: failed to open stream: HTTP request failed! HTTP/1.0 403 Forbidden in /home/nebghor/public_html/blog/wp-includes/theme.php on line 690

    On our log-in page, several other warnings also appear after .. “Cannot modify header information – headers already sent by (output started at /home/nebghor/public_html/blog/wp-includes/theme.php:690)..”.

    I already read about how to resolve these subsequent warnings, but can’t find anything on the first. Does anybody have any advice? Please let me know if you need any more info too.

Viewing 8 replies - 1 through 8 (of 8 total)

  • Update to 3.5.2; your 3.1 version is insecure. See if the error still exists after the update.

    You may also have been hacked. Use https://www.ads-software.com/plugins/exploit-scanner/ after the update.

    Try:
    – switching to the default theme by renaming your current theme’s folder inside wp-content/themes and adding “-old” to the end of the folder name using FTP or whatever file management application your host provides.

    – resetting the plugins folder by FTP or phpMyAdmin.

    Why are you using an old copy of WordPress? Were you aware that your site is currently running a very real risk of being hacked. You need to upgrade WordPress asap.

    Something strange there for sure. If you search for that string you’ll find a lot of sites with the same error. It is rarely a good thing for your code to be calling out to a remote web server on every request. So either

    1. You have a theme or plugin that’s been doing something stupid for a while, and now that the url has broken, it’s showing an error.
    2. You have been hacked.

    Start by looking at the contents of /home/nebghor/public_html/blog/wp-includes/theme.php (which is where the error is coming from). On Line 690 it should look something like this: https://github.com/WordPress/WordPress/blob/master/wp-includes/theme.php#L690

    If it is, then look for that string, e.g. “k.txt” in your code. “grep -r k.txt .” will work on a unix system, or on Windows, look for “find in files”.

    If not, looks like the core files were changed on you and you’ll want to reinstall WordPress. But before you do, could you paste the contents of the file to https://gist.github.com and send me the link (please don’t post hacked code here). I’ve been doing research on some CMS hacks and this one is a new one.

    Sean

    Refreshing your theme will fix it, i mean revert to default and try it via ftp option, let us know if it fixes

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    azharmuhd? If you want to be productive then please consider helping in the No Replies section.

    https://www.ads-software.com/support/view/no-replies

    Replying to old topics like this? It’s not really helping. This problem is 5 months old.

    Hi Jan, thanks for your suggestion, but i am helping at no replies posts, but my user activity is not showing all my replies? whats wrong? can you help me in this?

    i am helping at no replies posts

    From 8 & 9 months ago!? You were specifically told about this in https://www.ads-software.com/support/topic/sidebar-jumping-below-content?replies=13

    In other plugin-specific topics, the advice you have been trying to give has been potentially dangerous – especially given that you are not the developer of these plugins.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    You were replying randomly (and to be honest pointlessly) to topics that was months old. Your posts didn’t make much sense and didn’t serve any purpose except for setting off alarms. Those posts were deleted.

    If you want to help please do so. But just randomly replying to old posts? Please do not do that. It does not serve any purpose.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Strange warning: file(https://drvk.googlecode.com/files/k.txt)’ is closed to new replies.