Header Already Sent Error In My Two Websites

[ashfaq]

I am running two wallpapers websites.

www.walls4free.com
www.deskbeauty.com

Today both websites were working fine but now after five hours both are giving different errors.

www.walls4free.com is givng this error.
Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/includes/sessions.php on line 115

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/includes/sessions.php on line 115

I am also unable to login at  http://www.walls4free.com/admin/index.php and it give below error.
Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/includes/sessions.php on line 115

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/includes/sessions.php on line 115

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/admin/admin_functions.php on line 168

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/admin/admin_functions.php on line 169

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/admin/admin_functions.php on line 170

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/admin/admin_functions.php on line 171

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/walls4free.com/includes/auth.php:124) in /hsphere/local/home/smilepk/walls4free.com/admin/admin_functions.php on line 172
 
---------------------------

For www.deskbeauty.com i am getting this error
Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/includes/sessions.php on line 149

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/includes/sessions.php on line 149

Also i am unable to login at http://www.deskbeauty.com/admin/index.php and getting this error.
Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/includes/sessions.php on line 149

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/includes/sessions.php on line 149

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/admin/admin_functions.php on line 168

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/admin/admin_functions.php on line 169

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/admin/admin_functions.php on line 170

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/admin/admin_functions.php on line 171

Warning: Cannot modify header information - headers already sent by (output started at /hsphere/local/home/smilepk/deskbeauty.com/includes/auth.php:124) in /hsphere/local/home/smilepk/deskbeauty.com/admin/admin_functions.php on line 172

------------------------------------------------------------------------------

I didnt added uploaded any files on server or changes any thing, plz help i will be very thankfull

[Rembrandt]

FAQ-> http://www.4homepages.de/forum/index.php?topic=3378.msg13854#msg13854

mfg Andi

[V@no]

and what is in your includes/auth.php at line 124 (please show 10 lines above and below)

[ashfaq]

Thanks for reply but i have corrected all errors.
What i did is just uploaded whole script and templates files and it corrected all problems.
Thanks again.

[V@no]

I'm glad you fixed it, however you only partially fixed it, because you didn't find out what caused the problem in the first place, which can only create the same problem later on, in fact, when something starts happening all of the sudden by itself, one should be very caution because it could be a hack or a virus, which is better to investigate and find out how it was done to protect the site in the future.

[ashfaq]

You are right brother as at night everything was working again but now when i check after six hours someone put me again in much trouble as both sites are now not working as they are only showing some landing page and even didnt show any wallpaper or error.

Please tell me how to check security as i think its a hack and its not just

For DeskBeauty.com i am using 4images 1.74 and for Walls4Free i am using 1.76
Someone not just distrub 4image sites but all sites hosted on same server are having different errors.

[V@nо]

well, for starterters, I'd like to see that files.zip file you've attached recently but then deleted...

[ashfaq]

Infact someone get access to my ftp and chagne files in all websites but now again i recoverd them and also restrict ftp, let see what happened now.

I deleted files bcoz i recovered my sites but as you wish to see them, i am attaching them again.

Thanks V@no for quick and great help.

[V@no]

Unfortunately in the attached files nothing to go by, they are "clean"...
if you get any other errors, make sure you backup everything before you start deleting/replacing.

[ashfaq]

I clean everything again and all websites are working again.
I think hacker was,nt able to change every file he somehow acces index.php or any other file and i think put som type of malware ifram,
so i upload backup saved files and overwrite old file and everything is good.

Thanks for checking files and best help.