Header problem!

DVD Burner · Post by **DVD Burner** » Fri Jan 25, 2008 5:29 pm

Looks like someone is working on eplaya?

I get this:

?>
Warning: Cannot modify header information - headers already sent by (output started at /var/www/eplaya.burningman.org/includes/def_tree.php:2063) in /var/www/eplaya.burningman.org/includes/page_header.php on line 589

Warning: Cannot modify header information - headers already sent by (output started at /var/www/eplaya.burningman.org/includes/def_tree.php:2063) in /var/www/eplaya.burningman.org/includes/page_header.php on line 595

Warning: Cannot modify header information - headers already sent by (output started at /var/www/eplaya.burningman.org/includes/def_tree.php:2063) in /var/www/eplaya.burningman.org/includes/page_header.php on line 596

mereth · Post by **mereth** » Fri Jan 25, 2008 5:33 pm

I got the same thing on Int Explorer.
I cleaned out my temp internet files, history and cookies and it went away.

Dork · Post by **Dork** » Fri Jan 25, 2008 6:32 pm

It seems to happen randomly - def_tree.php gets updated constantly by the board, and every now and then it becomes corrupted or locked or something. It always clears itself up and it's beyond my skill level so I haven't looked into it further.

Token · Post by **Token** » Sat Jan 26, 2008 10:48 am

This error is due to white space being injected at the listed code line. It is a common error when folks edit files but not common when already stable code is generating scripts dynamically.

Unless someone is modifying the code, an error like this can indicate that the site is hacked.

This might be worth checking out or escalating to Staff.

Dork · Post by **Dork** » Sat Jan 26, 2008 1:17 pm

How do you know it's injected whitespace?

Token · Post by **Token** » Sun Jan 27, 2008 2:20 pm

It is one of the most common errors.

There was also a vulnerability back in version prior to 2.0.11 that used this error to inject code and deface the front page, but that was back, three or four years ago.

DVD Burner · Post by **DVD Burner** » Sun Jan 27, 2008 2:23 pm

Doesn't php5 and the latest version of phpbb resolve this problem?

Toolmaker · Post by **Toolmaker** » Sun Jan 27, 2008 5:15 pm

Its the CoS hackers.. we have been declared fair game.