Warnings & Possible Hack
 

Recently I've been getting warnings when I do --> Maintenance Update > Rebuild Attachments and Rebuild Custom Avatars.

Today I recieved a warning from a visitor...

Quote:
Warning: file(./logfile_worms.txt) [function.file]: failed to open stream: No such file or directory in [path]/includes/init.php(298) : eval()'d code on line 80

Warning: fopen(./logfile_worms.txt) [function.fopen]: failed to open stream: Permission denied in [path]/includes/init.php(298) : eval()'d code on line 105
Error Opening Logfile.

I might offer a warning if i can. Using fopen, can lead to your entire webpage & server being hacked an hijacked. By use of Code Injection

That is unless you have denied external access to that function
In the Rebuild areas I mentioned, I am seeing tempnam, fclose, fwrite, then a whole bunch of warnings and attachment missing comments.

I've never seen this before, use or fimiliar with those commands and TBH I have no idea how they got there or better yet... how to get rid of them.

Can someone please help, I currently have the forum closed till I figure out what's going on.

- Under Dog