Spurious <\/header> /hgroup

Posted by Jon_Roland on December 14, 2012 at 8:55pm

After installing 7.17 I see spurious

<\/header>

at the tops of most pages, and

/hgroup

at the borroms.

These appear on two sites, so what they have in common is 7.17 core files.

How do I/we fix this?

Comments

Posted by Jon_Roland on December 21, 2012 at 12:54am

These may be associated with a hack of the code, inserting unauthorized executable in PHP files to produce spam messages trying to sell Xanax.

But removing the code near the insertions didn't get rid of all the appearances. Neither did upgrading to 7.18.

constitution.org
jonroland.org

Posted by John_B on December 21, 2012 at 9:04am

I would grep the default theme and the module folders for places where the code might still be found.