php 漏洞提问 急解决思路
php 漏洞提问 急....
我们网站不知道怎么的多了个test.php
内容如下 ：
找了很多资料，也没看出个大概..
1. 我想知道这个一般是怎么注入到我们网站里的？？
2. 它主要起什么作用？？
我们网站其它原文件应该不会也被注入了吧...
------解决方案--------------------
1.首先在php.ini设定禁用eval函数(需确认系统中未使用此函数――普通系统很少用此函数)
2.搜索所有访问test.php的IP地址
搜集完资料后整理出来，报案。
- BatchFile code
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
descr: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
country: CN
admin-c: LQ112-AP
tech-c: LM273-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
changed: hm-changed@apnic.net 20030902
source: APNIC
route: 222.32.0.0/11
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
country: CN
origin: AS9394
mnt-by: MAINT-CN-CRTC
changed: ipas@cnnic.cn 20040402
source: APNIC
person: LV QIANG
nic-hdl: LQ112-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51892111
fax-no: +86-10-51847845
country: CN
changed: ipas@cnnic.net.cn 20060911
mnt-by: MAINT-CNNIC-AP
source: APNIC
person: liu min
nic-hdl: LM273-AP
e-mail: crnet_tec@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20041208
mnt-by: MAINT-CNNIC-AP
source: APNIC
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
descr: 22F Yuetan Mansion,Xicheng District,Beijing,China
country: CN
admin-c: LQ112-CN
tech-c: LM273-CN
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20030902
mnt-by: MAINT-CNNIC-AP
source: CNNIC
person: LV QIANG
nic-hdl: LQ112-CN
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing
phone: +86-10-51892111
fax-no: +86-10-51847845
country: CN
changed: ipas@cnnic.cn 20060419
mnt-by: MAINT-CNNIC-AP
source: CNNIC
person: liu min
nic-hdl: LM273-CN
e-mail: crnet_tec@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20041208
mnt-by: MAINT-CNNIC-AP
source: CNNIC <div class="clear">
</div>
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
AI Hentai Generator
Generate AI Hentai for free.
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
Analysis of how to use Source Insight in Ubuntu system
Jan 08, 2024 pm 11:49 PM
I believe that many friends are accustomed to using SourceInsight to read and analyze source code under Windows. There are indeed more efficient tools under LINUX, but it is troublesome and cumbersome to configure them. I believe many people definitely hope to be able to use them under Linux. SourceInsight can be used. The following editor will give you a detailed explanation of the use of SourceInsight in Ubuntu! Let’s go and see it together! This is my system information: Linuxgavin-laptop2.6.32-40-generic#87-UbuntuSMPTueMar600:56:56UTC2012x86_64GNU/Li
What button is source?
Oct 10, 2023 pm 03:26 PM
Source is the button to switch the input signal source or select a different input source. Typically found on televisions, projectors, sound systems, computer monitors, and other equipment. On the TV, the source button allows users to switch between different input sources to play different content on the TV. On a projector, the source button has a similar function and can connect different devices to the projector. On the audio system, the source button is used to switch between different audio input sources. On computer monitors, the source button functions similarly to TVs and projectors, etc.
RTX 4090 D with 48 GB and RTX 4080 Super with 32 GB: Modified GPUs appear in China
Aug 12, 2024 pm 09:49 PM
X user bdsqlsz recentlydiscoveredthat his cloud computing provider has both an Nvidia Geforce RTX 4090 D with 48 GB of RAM and a Geforce RTX 4080 Super with 32 GB of RAM. In both cases, this represents a doubling of the usual video memory. The user r
Pocket386 ultra-portable laptop quietly released with Win95 compatibility and uncommon processor
Jun 24, 2024 am 06:46 AM
The key specs of the new laptop are likely to remind some of their school days. It has 8 MB of memory and a 7-inch IPS display that supports 640 x 480 (4:3) and 800 x 480 modes; lots of retro ports and a 386 SX-compatible Ali M6117 processor running
BYD may avoid America\'s outsourcing mistakes with knock-down kits for export assembly
Sep 13, 2024 am 09:15 AM
When the US started outsourcing its manufacturing industry to China in the 80s, the move was sold as a clever business strategy that generated hefty returns for shareholders. The short-term cost reductions, however, resulted not only in the loss of s
Deepin V23 RC2 arrives with tweaks galore and optimizations aplenty
Jun 28, 2024 am 07:45 AM
The AI-enabled Deepin Linux distro has just received its latest update, dubbed V23 RC2. This version of Deepin comes with a number of package updates and new features. But it's not all about the features; the look and feel are the main spotlight of t
Infinix Note 40s gets listed online with all features and specifications
Jun 30, 2024 pm 09:32 PM
Infinix Note 40s is the newest addition to the Note 40 lineup. Not much is under wraps; the phone is now listed with all its features on the official webpage, as spotted by PassionateGeekz. Other phones currently found in the Infinix Note series (the
Apple Intelligence rolls out globally in iOS 18.1 beta 3 — EU and China still in Apple\'s dog box
Aug 31, 2024 am 10:19 AM
Apple announced its Apple Intelligence features back in June, and they initially made an appearance in the latest iOS 18 beta versions for the iPhone 15 Pro models and any iPad or Mac with an M1 SoC or newer. However, there have been a few location-r
