PHP bug Ask urgently ....
Our website doesn't know how much more a test.php
The contents are as follows:
Find a lot of information, also didn't see a probably.
1. I would like to know how this is generally injected into our website??
2. What is its main function??
Other original documents on our website should not be injected ...
------Solution--------------------
1. First disable the Eval function in the php.ini setting (verify that the function is not used in the system--the normal system seldom uses this function)
2. Search for all IP addresses that access test.php
After collecting the information, put it out and report it.
Batchfile Code
Inetnum:222.32.0.0-222.63.255.255netname:crtcdescr:china RAILWAY Telecommunications centerdescr:22f Yuetan Mansion, Xicheng district,beijing,p.r.chinacountry:cnadmin-c: lq112-aptech-c: lm273-apstatus:allocated PORTABLEmnt-by: Maint-cnnic-apchanged: [email protected] 20030902source:apnicroute:222.32.0.0/11descr:china RAILWAY Telecommunications centercountry:cnorigin:as9394mnt-by:maint-cn-crtcchanged: [email protected] 20040402SOURCE:APNICPERSON:LV qiangnic-hdl:lq112-ape-mail: [email protected]address:22f Yuetan Mansion, Xicheng District,beijing,p.r.chinaphone: +86-10-51892111fax-no: +86-10-51847845country:cnchanged: [email Protected] 20060911mnt-by:maint-cnnic-apsource:apnicperson:liu minnic-hdl:lm273-ape-mail: [email protected] address:22f Yuetan Mansion,xicheng district,beijing,p.r.chinaphone: +86-10-51848796fax-no: +86-10-51842426country: Cnchanged: [email protected] 20041208mnt-by:maint-cnnic-apsource:apnicinetnum:222.32.0.0-222.63.255.255netname:crtcdescr:china RAILWAY Telecommunications centerdescr:22f Yuetan Mansion,xicheng District, Beijing,chinacountry:cnadmin-c: lq112-cntech-c: lm273-cnstatus:allocated portablechanged: [email protected] 20030902MNT-BY:MAINT-CNNIC-APSOURCE:CNNICPERSON:LV qiangnic-hdl:lq112-cne-mail: [email protected]address: 22F Yuetan Mansion,xicheng district,beijingphone: +86-10-51892111fax-no: +86-10-51847845country:cnchanged: [Email protected] 20060419mnt-by:maint-cnnic-apsource:cnnicperson:liu minnic-hdl:lm273-cne-mail: [email protected]address:22f Yuetan Mansion,xicheng district,beijing,p.r.chinaphone: +86-10-51848796fax-no: + 86-10-51842426country:cnchanged: [email protected] 20041208mnt-by:maint-cnnic-apsource:cnnic