Shulou(Shulou.com)06/02 Report--

In this issue, the editor will bring you about how to solve the hijacking of the discuz Baidu snapshot. The article is rich in content and analyzes and narrates it from a professional point of view. I hope you can get something after reading this article.

The hijacked performance is as follows:

Enter your own URL in Baidu, appear the included post link, click and jump to the spinach website and so on.

Here's how to solve the problem:

Go to the discuz background to find the tool-file verification to see which php files have been modified recently.

1. Check the php file of the source file of the website to see if there is an IP address, or an abnormal website (the website that jumps above), and delete it if there is one.

2. Check the php file of the source file of the website to see if there is the following code: @ include ($_ SERVER ['DOCUMENT_ROOT'])

Delete this code if there is one. And decrypt the code.

For example: @ include ($_ SERVER ['DOCUMENT_ROOT'] .Pack (' Happy Magnum 2F646174612F6176617461722F30'))

The code to be decrypted is: 2F646174612F6176617461722F30

After decryption: / data/avatar/0

It means that there are illegally uploaded files under the above path, which are used for snapshot hijacking.

Solution: delete the above code and files.

The above is how to solve the hijacking of the discuz Baidu snapshot shared by the editor. If you happen to have similar doubts, you might as well refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.