Yadda ake bincika lambar tushen gidan yanar gizo don fayilolin baya? Nemo raunin doki na PHP Trojan akan layi

WordPressIta ce mafi amfani da kyauta kuma buɗaɗɗen tushe a duniyagina gidan yanar gizoshirin, akwai da yawaTallan Intanetamfani da ma'aikataGidan yanar gizon WordPressyiSEOTraffic sayar da tallace-tallace, sayar da membobi, sayar da kayayyaki, sayar da ayyuka...

• Don haka WordPress yana da wadata sosaiWordPress pluginkuma jigogi suna da kyauta don saukewa, yayin da ƙarin ci gaba, nau'ikan plugins da jigogi kuma ana samun su.

Kwanan nanChen WeiliangIdan kuna shirin siyan ƙwararrun nau'in plugin ɗin WordPress, je zuwa Google don ganowa, kuma ba da gangan ba gano cewa akwai gidan yanar gizon da ke ba da abubuwan saukarwa kyauta na fashe nau'ikan plugins da jigogi na WordPress.

Na yi ƙoƙarin saukewa kawai da amfani da shi, amma bai ji daidai ba: me yasa waɗannan gidajen yanar gizon da ke ba da nau'o'in saukewa kyauta, babu samfurin riba kwata-kwata, kuma babu wasu tallace-tallace a kan gidan yanar gizon?

Tun da an yi kutse a gidan yanar gizon sau da yawa, ina amfani da sigar da aka fashe软件, plugins ko jigogi, suna da hankali sosai idan akwai shirin raunin "kofar baya".

Mai zuwa shine Agusta 2020, 08Chen WeiliangHoton shafin yanar gizon hacked▼

• LinuxWasu masu kutse daga Indonesiya sun yi kutse tare da yi musu katsalandan.
• Akwai ƙarin fayil ɗin rauni na "mm.php" a cikin kowane babban fayil na gidan yanar gizon, wanda ƙila a yi amfani da shi ba daidai ba.VestaCP sakamakon panel.

Don magance matsalar hacking shine sake shigar da kai tsayeCentOS 7 OS kuma canza zuwaShigar da CWP Control Panel, sannan a mayar da madadin gidan yanar gizo▼

Yadda za a saita wariyar ajiya ta atomatik da aka tsara da kuma mayar da madadin a cikin kwamitin kula da CWP?

Lokaci na ƙarshe da aka yi hacking ɗin rukunin yanar gizona shine ƴan shekaru da suka gabata (na manta wace shekara).Kwanan nan (Agusta 2020, 8) sabar gidan yanar gizon an yi kutse kuma masu kutse daga Indonesiya suka lalata su, wataƙila ta yin amfani da kwamitin VestaCP mara kyau.Don magance matsalar hacking, kawai ...

• Domin na koyi game da raunin tsaro na "Pagoda Control Panel" a baya, na yanke shawarar yin amfani da shiCibiyar Kula da CWP.

Menene ma'anar bayan gida?

Musamman daga "Dokin Trojan", ƙofar baya yana nufin cewa software ta ƙara maɗaukaki, kamar buɗe ƙofar gidan ku, wanda ya dace da kutse da satar bayanai.

❗️Gargadi game da jigogi na plugin tare da bayan gida na Trojan

Shafukan yanar gizo guda 2 masu zuwa suna ba da fage-fage na manyan plugins na WordPress da jigogi na WordPress:

1) WPTRY ▼

2) Jigogi Kyauta na Premium ▼

• Chen WeiliangYana da tabbacin cewa software, plug-ins da jigogi a kan waɗannan gidajen yanar gizon biyu suna da madauki na bayan gida.

Yadda za a duba Trojan doki baya shirin vulnerabilities?

Akwai hanyoyi guda biyu don bincika lambar tushen gidan yanar gizon don fayilolin bayan gida:

• Na farko: yi amfani da plugin ɗin binciken tsaro na WordPress
• Na biyu: amfanionline kayan aikinKashe fayilolin dubawa

?Na farko: Yi amfani da Plugin Binciken Tsaro na WordPress

Ana ba da shawarar yin amfani da wannan plugin ɗin binciken tsaro na gidan yanar gizon WordPress - Tsaro na Wordfence don bincika duk jigogi da plugins akan gidan yanar gizon WordPress a cikin batches don gano ko akwai fayilolin rauni na baya na PHP▼

?Na biyu: yi amfani da sikanin tsaro don nemo fayilolin rauni na PHP akan layi

Kayan aikin kan layi don taimaka muku bincika fayilolin da ake tuhuma da URLs, gano nau'ikan malware ▼