• XSS.stack #1 – первый литературный журнал от юзеров форума

Malware related

Inone

HDD-drive
Пользователь
Регистрация
26.02.2023
Сообщения
31
Реакции
2
What does this file do
Because i saw it in my website?
?php
/** Adminer - Compact database management
* LINk https://www.adminer.org/
* @author Jakub Vrana, https://www.vrana.cz/
* @copyright 2007 Jakub Vrana
* @license https://www.apache.org/licenses/LICENSE-2.0 Apache License, Version 2.0
* @license https://www.gnu.org/licenses/gpl-2.0.html GNU General Public License, version 2 (one or other)
* @version 4.7.6
*/error_reporting(6135);$Zc=!preg_match('~^(unsafe_raw)?$~',ini_get("filter.default"));if($Zc||ini_get("filter.default_flags")){foreach(array('_GET','_POST','_COOKIE','_SERVER')as$X){$Li=filter_input_array(constant("INPUT$X"),FILTER_UNSAFE_RAW);if($Li)$$X=$Li;}}if(function_exists("mb_internal_encoding"))mb_internal_encoding("8bit");function
connection(){global$h;return$h;}function
admin(){global$b;return$b;}function
version(){global$ia;return$ia;}function
idf_unescape($u){$se=substr($u,-1);return
str_replace($se.$se,$se,substr($u,1,-1));}function
escape_string($X){return
substr(q($X),1,-1);}function
number($X){return
preg_replace('~[^0-9]+~','',$X);}function
number_type(){return'((?<!o)int(?!er)|numeric|real|float|double|decimal|money)';}function
remove_slashes($vg,$Zc=false){if(get_magic_quotes_gpc()){while(list($y,$X)=each($vg)){foreach($X
as$he=>$W){unset($vg[$y][$he]);if(is_array($W)){$vg[$y][stripslashes($he)]=$W;$ vg[]=&$vg[$y][stripslashes($he)];}else$vg[$y][stripslashes($he)]=($Zc?$W:stripslashes($W));} }}}function
bracket_escape($u,$Pa=false){static$xi=array(':'=>':1',']'=>':2','['=>':3','"' =>':4');return
strtr($u,($Pa?array_flip($xi):$xi));}function
min_version($dj,$Ge="",$i=null){global$h;if(!$i)$i=$h;$qh=$i->server_info;if($Ge&&preg_match('~( [\d.]+)-MariaDB~',$qh,$A)){$qh=$A[1];$dj=$Ge;}return(version_compare($qh,$dj)>=0) ;}function
charset($h){return(min_version("5.5.3",0,$h)?"utf8mb4":"utf8");}function
script($Ah,$wi="\n"){return"<script".nonce().">$Ah</script>$wi";}function
script_src($Qi){return"<script src='".h($Qi)."'".nonce()."></script>\n";}function
nonce(){return' nonce="'.get_nonce().'"';}function
target_blank(){return' target="_blank" rel="noreferrer noopener"';}function
h($P){return
 
Пожалуйста, обратите внимание, что пользователь заблокирован
Unless you used something which auto deploy Adminer to your server, you got pwned and someone is using adminer interface to exfiltrate your databases. You should change all password and take a look on your logs.

Cant agree more mate
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх