Thread:Project:Support desk/Hidden texts automatically inserted in old and new pages/reply (3)

Look at your index.php for mediawiki. There is probably some code right at the top of that file that is putting out the garbage for GoogleBot.

Using the following command, I was able to simulate googlebot at get the messed up code from your site:

curl -A 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)' 'http://www.zamboanga.com/z/index.php?title=Hacked'

I was able to see a list of urls that the malicious code put right above MediaWiki's output. The last bit that was printed was:

&lt;!-- HTML 3.51.234 -->

Using Google to search for this bit, I came across this encoded PHP string, so you might be looking for something like that at the beginning of your index.php.