Have You Checked Your WP Installation Files Lately?
I've been working on a theme so thankfully I've been checking it for errors with the W3C Validation service. I noticed I had a file named css.js with no path. It would just be whatever url/css.js. When I clicked the link it showed the HTML output of the page. Later today I was working on another site on a separate server and I noticed the same thing (now I'm starting to worry). I couldn't find the source of the file so after awhile I moved on to another task. I was adding an RSS widget to on of my sites and noticed an RSS junk after link... message. I decided I would find the source of the css.js file and started looking.
If this is something I've simply overlooked, please let me know, if not you might want to check your files since it has happened on 3 separate servers all with different hosts.
What To Look For And Where:
The CSS.JS File:
The first one I noticed was the css.js file I'd been looking for. It was located in the root of my WordPress directory. If anyone is interested I can link to a paste bin to see the code.
The second file:
The next question was how was the css.js file being included? After checking my .htaccess file and a few others I noticed the index.php file in the WordPress root directory was 496 bytes while the one I just downloaded was 397 bytes. So I downloaded the suspect index.php file and opened it up. That's what was calling the css.js file.
Here is the code in the index.php file:
<?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define('WP_USE_THEMES', true);
/** Loads the WordPress Environment and Template */
require('./wp-blog-header.php');
?><script src="css.js" type="text/javascript"></script>
<?php
?>
I'm not sure where it came from yet, but I thought this would be a good place to spread the word or see if anyone else knows what's up.
