mail.php hacked??

This morning I logged onto my site, www.asia-connect-th.com and went to check my mail. This is what I got:

Parse error: syntax error, unexpected '-', expecting T_STRING or T_VARIABLE or '$' in /home/connect/public_html/mail.php on line 268

I checked the mail.php from the boonex zip file and there are is no code above line 265. I replaced the server mail.php with this one and everything is now working fine.

Having checked the other mail.php I found this additional code:

$aReplace['ID'] = $aMsg['ID'];
$aReplace['CheckBox'] = '<input type="checkbox" class="td_mailbox_checkbox" id="sel_msg_'.$aMsg['ID'].'" name="m['.$aMsg['ID'].']" value="on" />';
$aReplace['Flag'] = '<img class="mailbox_flag_img" src="'.getTemplateIcon( $aMsg['New'] ? 'not_readed.gif' : 'readed.gif' ).'" title="'._t( $aMsg['New'] ? '_New Message' : '_Readed' ).'" />';


--- here some change -------------

$aReplace['From'] = '<center><div style="width:45px;">' . get_member_icon($aMsg['Recipient']) . "<div class=\"clear_both\"></div><!--{$aMsg['RecipientNickName']}--> <a href=\"".getProfileLink($aMsg['Recipient'])."\">{$aMsg['RecipientNickName']}</a>" . '</center>';

--- end of change ----------------


$aReplace['Date'] = "<!--{$aMsg['timestamp']}--> {$aMsg['Date']}";
$aReplace['Subject'] = "<!--$sSubject--> <a href=\"{$site['url']}messages_outbox.php?message={$aMsg['ID']}\">$sSubject</a>";


$sInsertRow = $tmplRow;
foreach( $aReplace as $key => $val )
$sInsertRow = str_replace( "{{$key}}", $val, $sInsertRow );

$sInsertRows .= $sInsertRow;
$tr_class = ( $tr_class == 'odd' ? 'even' : 'odd' );
}

$ret = str_replace( "{InsertRows /}", $sInsertRows, $ret );

$ret =
'<form name="mailbox_form" action="'.$_SERVER['PHP_SELF'].'?mode=outbox" method="post">'.$ret.'</form>';

return $ret;
}

I have not edited or updated mail.php so how did this code get there? Does anyone recognise this code? Dolphin 6.1.4

Your help would be appreciated.

Regards,

Stuart

Sorry to get off topic Stuart....

But are you using RSS feeds from the Telegraph.co.uk on your site? Looks like it.

The reason for my query is that we are trying to resolve the RSS feed issue with regards to using ANY outside RSS feed in the RSS box provided by Dolphin. We can't seem to make it work...

See post. http://www.boonex.com/unity/forums/#topic/Rss-Forum-Posts-Problem.htm

TO BE CLEAR: The issue at hand that we ALL are trying to resolve is to be able to place an RSS feed from google or yahoo and have the contents show on our home page.

It looks like you have this sussed.

Thanks in advance for any light you can shed our way.

~~ Lorren

Hello Irepton,

This is the code i use for rss feed:

1 - http://www.telegraph.co.uk/newsfeed/rss/expat.xml
2 - http://newsrss.bbc.co.uk/rss/newsonline_world_edition/americas/rss.xml

I hope this works for you.

Stuart

hmmmmmm  ..... 

http://www.telegraph.co.uk/rss works fine for me in a rss block  ..... 

The others stuart mentioned work fine also  ..... 
.

Sounds like you added or eddit the code from this blog post or possibly something similar. Which is to add the delete button so your members can delete there own outbox mail.

Can't say for sure but you might want to check this out and see if that sounds like something familiar. Maybe you edited the file for that and forgot about it. Maybe not and just a thought.

http://www.boonex.com/unity/blog/entry/Delete_mail_from_outbox_6_1

I think your right. oops!

Stuart