Skip to:
Content
Pages
Categories
Search
Top
Bottom

All my themes polluted right after I install some pinterest style themes


  • Architect
    Member

    @swotong

    11 years, 11 months ago

    I’m using wordpress MU with buddypress.
    I just uploaded 2 or 3 pinterest like themes and was testing them…all of a sudden I get these errors and they remain on every page of my website even after I deleted these themes!

    these two errors are always there:

    Warning: include_once(includes/custompost.php) [function.include-once]: failed to open stream: No such file or directory in /home/swotong/public_html/bluewhalefamily.com/wp-content/themes/frisco-for-buddypress/functions.php on line 271

    Warning: include_once() [function.include]: Failed opening ‘includes/custompost.php’ for inclusion (include_path=’.:/usr/lib/php:/usr/local/lib/php’) in /home/swotong/public_html/bluewhalefamily.com/wp-content/themes/frisco-for-buddypress/functions.php on line 271

    I tried to figure it out myself and I found that most if not all themes’ function.php files in my wordpress multisite are changed—the following code is added at the end of function.php.
    `
    <?php
    include_once (‘includes/custompost.php’);
    ?>
    `
    The warning disappears once I delete the above codes but I have about 80 users using different themes on my site, do I have to delete that code one by one and is that the proper way?

    Another warning I get after trying those themes is the following:

    Warning: Cannot modify header information – headers already sent by (output started at /home/swotong/public_html/bluewhalefamily.com/wp-content/themes/frisco-for-buddypress/functions.php:270) in /home/swotong/public_html/bluewhalefamily.com/wp-includes/pluggable.php on line 866

    It appears every time I press visit random site/group/user ….

    The themes that cause these problems should be one of the following : (I’m sorry but I really can’t make sure which one it is )
    iphoto/photum/graphictheme

    Please give me a hand. Thank you so much!

    P.S. if I have to reinstall, how can I keep my users’ data as much as possible?
    this is my site’s address: bluewhalefamily.com

Viewing 8 replies - 1 through 8 (of 8 total)

  • Paul Wong-Gibbs
    Keymaster

    @djpaul

    11 years, 11 months ago

    That error might be in the Frisco theme, so contact its author for support.


    Architect
    Member

    @swotong

    11 years, 11 months ago

    Hi Paul,
    I just deleted Frisco and download, install it again. Now my main site is working fine. However the users on my site, because they each use different themes, their own page are still showing those warnings… These themes are somehow ‘polluted’ with this code:
    `<?php
    include_once (‘includes/custompost.php’);
    ?>`
    which is inserted at the end of the functions.php file. Meanwhile, there are some themes that aren’t polluted and I find they have a function folder in their theme folder which I assume is the reason they are not polluted..

    Does anyone know what the above code mean and do I have to clean every one of my theme?


    Architect
    Member

    @swotong

    11 years, 11 months ago

    The other warning which doesn’t have to do with themes :

    Warning: Cannot modify header information – headers already sent by (output started at /home/swotong/public_html/bluewhalefamily.com/wp-content/themes/frisco-for-buddypress/functions.php:270) in /home/swotong/public_html/bluewhalefamily.com/wp-includes/pluggable.php on line 866

    This seems to be solved after I go to the line that cause error

    header(“Location: $location”, true, $status);

    I just change the above ‘true’ into ‘false’ and this warning haven’t appeared so far…I don’t really what I’m doing though…Really appreciate it if some one can tell me what this line mean and if that’s the right way to solve the problem..

    Thank you!


    Architect
    Member

    @swotong

    11 years, 11 months ago

    Does anyone know how I can search and delete that same virus code in all my themes conveniently? I have hundreds of themes in my site so it will take me a long time to delete that code one by one….

    “virus code”:

    `<?php
    include_once (‘includes/custompost.php’);
    ?>`


    @mercime
    Keymaster

    @mercime

    11 years, 11 months ago

    == I just uploaded 2 or 3 pinterest like themes and was testing them ==

    1. Delete those themes. Before installing any theme in your live site, check it out first in a test installation using Exploit Scanner plugin, Theme Check plugin and Log Deprecated Notices plugin with WP_DEBUG true.

    2. You may have been hacked. https://codex.wordpress.org/FAQ_My_site_was_hacked
    No theme nor plugin should be adding anything in your themes’ functions.php file without your express permission.
    Deactivate BuddyPress and BP/WP plugins and concentrate on getting your site clean.

    3. https://codex.wordpress.org/Hardening_WordPress
    Before activating BuddyPress, make sure your WP install is finally rid of issues.
    For more assistance please post at https://wordpress.org/support/forum/how-to-and-troubleshooting


    Architect
    Member

    @swotong

    11 years, 11 months ago

    Thank you @mercime! I’ll be more careful with the themes in the future.

    I’m really worried when you said it might be hacked…I downloaded those three themes(iphoto/photum/graphictheme) from this website http://devstand.com/design/pinterest-wordpress-themes/ Is that a suspicious website?

    I personally feel it’s more like a incompatible issue rather than a malicious attack because pinterest style theme seem to have some special feature for example showing more images when you drag down to the bottom of the page etc. but you are right…it shouldn’t touch the functions.php file of other themes…Anyway I don’t have any experience in dealing with hackers at all so maybe I’m just trying to comfort myself I’m not hacked…


    @mercime
    Keymaster

    @mercime

    11 years, 11 months ago

    == but you are right…it shouldn’t touch the functions.php file of other themes… ==

    Deactivate all plugins and change to default theme.
    Follow the info posted in codex article.
    Install/Run the Exploit Scanner plugin right now in your site.
    Install/Run Theme Check plugin (check each theme) and Log Deprecated Notices plugin with WP_DEBUG true.
    Backup DB and server files regularly.


    Architect
    Member

    @swotong

    11 years, 11 months ago

    thank you @mercime !

    I found that the problem come from the theme ‘photum’… I checked it out and found its author doesn’t look like a bad guy to me so it should be mostly the compatibility problem I think… but I’ll take your advice especially the backup one!

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘All my themes polluted right after I install some pinterest style themes’ is closed to new replies.

Topic Info

Topic Tags

Skip to toolbar