"Cannot execute a blank command..."

[Kneginja]

I had a hacker attack and after that on main page of my forum is this line:
"Warning: system() [function.system]: Cannot execute a blank command in [path]/global.php(400) : eval()'d code on line 2"

I don't know how to deleted it and I don't know what they did to provoke this.

[Steve Machol]

To troubleshoot this, first reupload all the original vB non-image files (except install.php). Make sure you upload these in ASCII format and overwrite the ones on the server. Also be sure to upload the admincp files to whichever directory you have set in your config.php file. T

Next, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);

If that does not resolve this, then fill out a support ticket at:

https://members.vbulletin.com/membersupport_contactform.php

Please include a complete description of the problem and be sure to include the login info to your Admin CP, phpMyAdmin and FTP in the 'Sensitive Data' field.

[Kneginja]

I did what you said, but now i lost my banner and all member info with picture (where is shown how many posts from last visit, etc) from the home page.

[Steve Machol]

The only way you would 'lose' those is if they were from add-ons.

Eval() errors are from modifications.

To troubleshoot this, first reupload all the original vB non-image files (except install.php). Make sure you upload these in ASCII format and overwrite the ones on the server. Also be sure to upload the admincp files to whichever directory you have set in your config.php file. Then run 'Suspect File Versions' in Diagnostics to make sure you have all the original files for your version and that none show 'File does not contain expected contents':

Admin CP -> Maintenance -> Diagnostics -> Suspect File Versions

[Note: In some cases you may also need to remove any of the listed .xml files in the includes/xml directory.]

Next, disable all products (except vB Blog, vB CMS and Skimlinks if you have them.)

Admin CP -> Plugins & Products -> Manage Products -> Disable

Then manually uncheck all plugins that are not for 'vBulletin Blog' and vBulletin CMS' here:

Admin CP -> Plugins & Products -> Plugin Manager

You must do BOTH of those steps in order to disable all non vBulletin Modifications.

Then if you still have this problem, create a new style and choose no parent style. This will force it to use the default templates. Finally empty your browser cache, close all browser windows then try again. Make sure you change to the new style and view your forums with it.