Gansu Provincial Administration for Industry and Commerce Online Business Processing System Backdoors in some PHP management system programs

updatesession();
}

There is also a function in this file. It is not necessary and can be removed:

Copy code The code is as follows:

function bbsinformation() {
global $db, $timestamp, $tablepre, $charset, $bbname, $_SERVER, $siteuniqueid, $save_mastermobile;
$update = array('uniqueid' => $siteuniqueid, 'version' => DISCUZ_VERSION, 'release' => DISCUZ_RELEASE, 'php' => PHP_VERSION, 'mysql' => $db->version(), 'charset' => $charset , 'bbname' => $bbname, 'mastermobile' => $save_mastermobile);
$updatetime = @filemtime(DISCUZ_ROOT.'./forumdata/updatetime.lock');
if(emptyempty($updatetime) || ($timestamp - $updatetime > 3600 * 4)) {
@touch(DISCUZ_ROOT.'./forumdata/updatetime.lock');
$update['members'] = $db->result_first("SELECT COUNT (*) FROM {$tablepre}members");
$update['threads'] = $db->result_first("SELECT COUNT(*) FROM {$tablepre}threads");
$update['posts' ] = $db->result_first("SELECT COUNT(*) FROM {$tablepre}posts");
$query = $db->query("SELECT special, count(*) AS spcount FROM {$tablepre} threads GROUP BY special");
while($thread = $db->fetch_array($query)) {
$thread['special'] = intval($thread['special']);
$update[' spt_'.$thread['special']] = $thread['spcount'];
}
}
$data = '';
foreach($update as $key => $value) {
$data . = $key.'='.rawurlencode($value).'&';
}
return 'update='.rawurlencode(base64_encode($data)).'&md5hash='.substr(md5($_SERVER['HTTP_USER_AGENT '].implode('', $update).$timestamp), 8, 8).'×tamp='.$timestamp;
}

There is also admin/home.inc.php, about 193~196 lines (Official original version of DZ6.1.0 UTF-8), here:

Copy code The code is as follows:

showtablerow('', array('class="vtop td24 lineheight"', 'class="lineheight smallfont "'), array(
lang('home_discuz_version'),
'Discuz! '.DISCUZ_VERSION.' Release '.DISCUZ_RELEASE.' '.lang('home_check_newversion').' '
));

Although there is no direct communication with the official here,,,, I watched If you want to patch it, just go to the official website and check it out. Also, if you don’t need all the files with insenz in their file names, delete them directly. It’s of no use.

The above has introduced some backdoors in the PHP management system program of the Gansu Provincial Administration for Industry and Commerce's online business processing system, including the content of the Gansu Provincial Administration for Industry and Commerce's online business processing system. I hope it will be helpful to friends who are interested in PHP tutorials. .