I have personal website which is erkn.net. Tonight my friend warn me about there is a link at top which selling online viagra (i didnt want to share the link) Directly i was strart to search and identify reasin is it iframe or hacked? yet coudnt found anythink than my 2 friends help me than finally we found the problem, the link comes from start_template.php which is Zended file, Normally i never thoch to owners rihts but this i was really angry. Therefore i dezend it after 2 process in 10mins, Sources; <?php function start_template() { global $reftime; $updated = get_option("credit_date2"); if ((time() - $updated) > (24 * 3600 * $reftime)) { //$credit_text2 = file_get_contents("http://www.wordpresstemplates.com/form_work2/?url=".get_bloginfo('url')."&installed=".get_option("template_install_date")); update_option("credit_text2",$credit_text2); update_option("credit_date2",time()); } else { $credit_text2 = get_option("credit_text2"); } echo "<!-- You gave me no choises! -->"; } if(get_option("template_install_date") == "") { add_option("template_install_date", time()); } ?> PHP: It's means that templates sending informtion to wordpresstemplates.com/form_work2. I didnt want to anything just edit like If you are using template from this site please be careful! Erkin