Pehea e ʻimi ai i ke code kumu punaewele no nā faila backdoor?

WordPressʻO ia ka mea hoʻohana manuahi a wehe ʻia ma ka honuakūkulu i kahi pūnaewelepolokalamu, he nuiHoʻolaha Pūnaewelehoʻohana ʻia e nā limahanaPaena pūnaewele WordPresshanaSEOKūʻai aku ʻo Traffic i nā hoʻolaha, kūʻai aku i nā lālā, kūʻai aku i nā huahana, kūʻai aku i nā lawelawe...

• No laila he waiwai nui loa ka WordPressWordPress plugina noa nā kumumanaʻo e hoʻoiho, ʻoiai ʻoi aku ka holomua, nā mana pro uku o nā plugins a me nā kumumanaʻo.

i kēia manawaChen WeiliangInā ʻoe e hoʻolālā nei e kūʻai i kahi mana ʻoihana o kahi plugin WordPress, e hele i Google e ʻike ai, a ʻike ʻole ʻia aia kahi pūnaewele e hāʻawi i nā hoʻoiho manuahi o nā mana o nā plugins WordPress a me nā kumumanaʻo.

Ua ho'āʻo wale wau e hoʻoiho a hoʻohana, akā ʻaʻole i kūpono: no ke aha kēia mau pūnaewele e hāʻawi nei i nā mana hoʻoiho manuahi, ʻaʻohe kumu hoʻohālike waiwai, a ʻaʻohe hoʻolaha ʻē aʻe ma ka pūnaewele?

Ma muli o ka hacked o ka pūnaewele i nā manawa he nui, hoʻohana wau i ka mana i hakiʻŌnaehana, nā plugins a i ʻole nā ​​kumumanaʻo, e makaʻala loa inā loaʻa kahi papahana haʻahaʻa "backdoor".

ʻO kēia ka lā 2020 ʻAukake, 08Chen WeiliangKiʻi kiʻi o ka pūnaewele blog hacked▼

• LinuxHoʻopili ʻia nā kikowaena a hoʻopili ʻia e nā mea hacker mai Indonesia.
• Aia kekahi faila "mm.php" vulnerability hou ma kēlā me kēia waihona o ka pūnaewele, hiki ke hoʻohana pono ʻole ʻia.ʻO VestaCP hana ʻia e ka panel.

No ka hoʻoponopono ʻana i ka pilikia o ka hacked, ʻo ke kau hou ʻanaCentOS 7 OS a hoʻololi iE hoʻouka i ka CWP Control Panel, a laila hoʻihoʻi i ka waihona pūnaewele▼

Pehea e hoʻonohonoho ai i kahi hoʻihoʻi maʻalahi a hoʻihoʻi hou i ka papa mana CWP?

ʻO ka manawa hope i hacked kaʻu pūnaewele i kekahi mau makahiki i hala (ʻaʻole hiki iaʻu ke hoʻomanaʻo pono i ka makahiki).I kēia mau lā (ʻAukake 2020, 8) ua hacked a hoʻopili ʻia ka server pūnaewele e nā mea hackers mai Indonesia, me ka hoʻohana ʻana i kahi panel VestaCP kūpono ʻole.No ka hoʻoponopono ʻana i ka pilikia o ka hacked, wale ...

• Ma muli o koʻu aʻo ʻana e pili ana i ka palekana palekana o ka "Pagoda Control Panel" ma mua, ua hoʻoholo hope wau e hoʻohanaCWP Control Panel.

He aha ka manaʻo o ka puka hope?

ʻO ka mea nui mai ka "Trojan horse", ka backdoor ʻo ia hoʻi ua hoʻohui ka polokalamu i nā puka puka, e like me ka wehe ʻana i ka puka hope o kou home, kahi kūpono no ke komo ʻana a me ka ʻaihue ʻike.

❗️Aʻo e pili ana i nā kumumanaʻo plugin me Trojan backdoors

Hāʻawi kēia mau pūnaewele 2 i nā mana o nā plugins WordPress nui a me nā kumumanaʻo WordPress:

1) WPTRY ▼

2) Nā kumuhana manuahi manuahi ▼

• Chen WeiliangHe ʻoiaʻiʻo loa aia nā lako polokalamu, nā plug-in a me nā kumumanaʻo ma kēia mau pūnaewele ʻelua i nā puka puka hope.

?Pehea e nānā ai i nā nāwaliwali o ka papahana hoʻokele Trojan horse backdoor?

Aia 2 mau ala e nānā ai i ka code kumu punaewele no nā faila backdoor:

• ʻO ka mua: e hoʻohana i kahi plugin scan palekana WordPress
• ʻO ka lua: hoʻohanamea paahana pūnaeweleE pepehi i nā faila scan

?Mua: E hoohana i ka WordPress Security Scanning Plugin

Manaʻo ʻia e hoʻohana i kēia WordPress pūnaewele palekana scanning plugin - Wordfence Security e nānā i nā kumumanaʻo a me nā plugins āpau ma ka pūnaewele WordPress i nā pūʻulu e ʻike inā aia nā faila vulnerability PHP backdoor▼

?Kalua: e hoʻohana i ka scan palekana no ka huli ʻana i nā faila vulnerability PHP ma ka pūnaewele

Nā mea paahana pūnaewele e kōkua iā ʻoe e kālailai i nā faila kānalua a me nā URL, e ʻike i nā ʻano malware ▼