Why I can view my php source code online?

Question

I have this weird problem. I purchased a very well-known 3rd-party php-based forum software. Uploaded to my server, run it for few weeks. This morning, when I visit my site, it display ALL the php code, including all the comments etc, like what you will see if you open it with notepad. VERY scary, my database config which is in php file also visible, what the hell is this?? I have no choice but to take my website down now.

What should I do? How the hell internet browser can view PHP code? I though php code is very safe??

Is somebody hacked my website??

Answer 1

That's a configuration problem at the server (like mod_php not being loaded for some reason). Best contact your hosting provider immediately and let them know they have a serious problem!

Unless you have uploaded your own .htaccess file, which could also be the source of problematic Apache configuration settings?

Answer 2

Somebody disabled your script interpretation on your webserver. Ask your host admin.

Answer 3

Quick fix is to place a blank index.html in your website (and forum root directory if different). It won't stop people accessing your source code if they know the script names and know this error is in place, but at least it won't be displayed to every man and his dog as they visit your website/forum.

Other than that, you've had the PHP parsing module on your server disabled, either incorrectly or accidentally. Contact your host immediately, but I presume you would have already done this.