Hi

Suddenly I have got a lot of "spam" on my open.php page

ie a load of adverts in text form appeared - see link below

(http://island-computers.com/help2/open.php)

I have looked at the source code and cannot see where it has come from

Any ideas please?

Regards

Paul

What changes did you make to open.php or include/client/open.inc.php ?

Can you upload your inc.open.php and maybe the header.inc.php ?

I haven't made any changes - that is why I am puzzled - it was just when a customer emailed me and told me of the problem!

open.php

open.inc.php

header.inc.php

all attached as text files

Re-upload a fresh install of osTicket. At the top of all those files you have a base64_decode script. That is not apart of osTicket.

You can remove it also but it's best to just do a fresh install.

The code starts with: <? /**/eval(base64_decode( at the top of those files.

Write a Reply...