DEDE Dream CMS was black data emptied important issue

Intermediary trading http://www.aliyun.com/zixun/aggregation/6858.html"> SEO diagnostic Taobao customer hosting technology hall

Yesterday a person said I black his station, said the data is gone, the background left my website, I was thinking someone was framed me, so I log in the background and found my background is not up, using the default user name and password (admin) Landing success, the data are gone, I think this is over, I admit that peacetime conduct, will not be enemies, is it a competitor? That does not mean fraudulent I also black, ah, so find Reasons, landing site information, write this strange site information, and then landing, the information actually replaced by another one, I immediately log in to the server to MYSQL Based view and found the data intact, it is strange, why the data in the database intact The background of the site is empty, and even the login account is gone, I began to suspect that not the data is empty, may just change the path, so check the modified yesterday, and found in the path / include / in the three files were Modified, but also more out of a suspicious file

The three modified files are:

/include/config_base.php

/ include / config_hand.php

/ include / config_hand_bak.php

Suspicious files: purview.php

I used the original backup file to replace the three files have been modified, and suspicious files deleted, use my account to log in the background success, the data are in, and finally a sigh of relief.

Personally 211.html "> think this is very important, because fortunately you can use the default password to log in, or difficult to find, I believe there are many people because this see the immediate reinstallation of the import data, so trouble.

Webmaster Tools http://tool.admin5.com