Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:69843 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 19340 invoked from network); 24 Oct 2013 13:55:54 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 24 Oct 2013 13:55:54 -0000 Authentication-Results: pb1.pair.com smtp.mail=johannes@schlueters.de; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=johannes@schlueters.de; sender-id=unknown Received-SPF: error (pb1.pair.com: domain schlueters.de from 217.114.215.10 cause and error) X-PHP-List-Original-Sender: johannes@schlueters.de X-Host-Fingerprint: 217.114.215.10 mail.experimentalworks.net Received: from [217.114.215.10] ([217.114.215.10:35094] helo=mail.experimentalworks.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 22/C9-10840-AE629625 for ; Thu, 24 Oct 2013 09:55:54 -0400 Received: from [192.168.2.20] (host-188-174-196-177.customer.m-online.net [188.174.196.177]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: johannes@schlueters.de) by mail.experimentalworks.net (Postfix) with ESMTPSA id 68E7A40659; Thu, 24 Oct 2013 15:56:06 +0200 (CEST) To: Paul Dragoonis Cc: "guilhermeblanco@gmail.com" , Lester Caine , internals Mailing List In-Reply-To: References: <5269018C.6020200@cubiclesoft.com> <5269071C.1040403@lsces.co.uk> Content-Type: text/plain; charset="UTF-8" Date: Thu, 24 Oct 2013 15:55:38 +0200 Message-ID: <1382622938.8840.300.camel@guybrush> Mime-Version: 1.0 X-Mailer: Evolution 2.30.3 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] php.net - The Website Ahead Contains Malware From: johannes@schlueters.de (Johannes =?ISO-8859-1?Q?Schl=FCter?=) On Thu, 2013-10-24 at 14:42 +0100, Paul Dragoonis wrote: > So it's saying functions.js on static is different from that of > functions.js on the main, inserting an iframe to > http://lnkhere.reviewhdtv.co.uk/stat.htm > > I can't test this as the functions.js on static is 404'ing for me now. > > Was there an intrusion on static manually altering the file? functions.js was removed http://git.php.net/?p=web/php.git;a=commit;h=8e87088c3f51b594dc7d7ed71115d215a7acf78b The site meanwhile was also taken out of Google's blacklist. Aside from that: We are investigating the cause for these issues, public announcements will follow later. No need for speculation here. :-) johannes