9
I've just visited your site and that file (58.65.234.163/t/m1004z410157.html) is being loaded on start-up.
That IP address (58.65.234.163) is registered in Hong Kong. See the "
whois".
There is an address to report abuse -
abuse@hostfresh.com - use it.
I've googled 58.65.234.163/t/m1004z410157.html and the only link on the net is to the first post in this thread. Yay - a "googlewhack" to me
Of course, now I've posted this.....
Try going straight to yoursite.com/user.php and see if the code is still called. If it is then check your theme.html for dubious code, e.g. a sneaky iframe.
Also, if the file is being called and theme.html looks okay, check your index.php - there shouldn't be any more code in it than this:
include "mainfile.php";
//check if start page is defined
if ( isset($xoopsConfig['startpage']) && $xoopsConfig['startpage'] != "" && $xoopsConfig['startpage'] != "--" ) {
header('Location: '.XOOPS_URL.'/modules/'.$xoopsConfig['startpage'].'/');
exit();
} else {
$xoopsOption['show_cblock'] =1;
include "header.php";
include "footer.php";
}
If the code isn't being called when you go to user.php isn't then login, go straight to the admin panel and disable all the module blocks on your homepage
except the login/user menu block.
Go to the homepage and see if the file isn't being called. If not then add one of the blocks back in. Repeat until the culprit is found.
Do you use the "Protector" module? If not, and I suspect you don't, then install it when you have traced the problem.
Please don't be afraid to ask for help.