注册
登录
| 关键词： width uploadfile screen resized window discuz open true 0.7 Click |
朋友是一个discuz的忠实用户，经常上discuz的网站看文章。作为国内最受欢迎的开源BBS开发商，Discuz吸引了众多站长和PHP技术人员。然而树大招风。近日就突然出现了挂马事件。如图1、2所示。 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/uploadfile/news/uploadfile/200903/20090304102511592.webp');}" alt="Click here to open new window CTRL+Mouse wheel to zoom in/out" src="/uploadfile/news/uploadfile/200903/20090304102511592.webp" width=716 onload="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" border=0 resized="true"> 图1 screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('/uploadfile/news/uploadfile/200903/20090304102513755.webp');}" alt="" src="/uploadfile/news/uploadfile/200903/20090304102513755.webp" onload="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" border=0> 图2出现挂马迹象的时间是2009年3月3日晚上18点-19点之间。木马网站为：hxxp://www.wrating.com。19点以后再次刷新时，已经没有了报警提示。如果是Discuz官方技术人员去掉的话，那Discuz的应急响应速度还是非常快的。Discuz的论坛产品一直是以安全性见长，不知道黑客是如何打开的缺口。来源：51cto |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
