Cashar dhamaystiran oo ku saabsan Dhibaatooyinka WordPress ee Awood la'aanta Wordfence ee Abuurista wordfence-waf.php

Qof ayaa sheegay in ka dib markii uu Wordfence ku rakibay boggiisa internetka, uu sii waday inuu helo khaladaad sheegaya in uusan abuuri karin faylka wordfence-waf.php ee ku jira galka xididka. Waxaan ka codsaday inuu ii soo diro sawir shaashad ah; fariinta qaladku waxay ahayd hal sadar oo keliya, isagoo leh waa arrin ogolaansho fayl ah.

Waxaan ka fikiray muddo yar, waxaana ogaaday inaan tan hore ula kulmay. Waxaan ku qaatay waqtiyo badan isku dayga inaan ogaado, anigoo ku dhawaad ​​​​u maleynaya in bixiyaha martigelinta uu wax qabanayo. Waxay noqotay arrin ogolaansho iyo lahaansho ah, laakiin macquulka guddiga xakamaynta martigelinta ayaa runtii jahwareerin kara.

Aan marka hore caddeeyo waxa uu yahay wordfence-waf.php.

Dhab ahaantii waa faylka ilaalinta ee Wordfence firewall, kaas oo ay tahay in lagu qoro galka asalka ah ee bogga internetka, isla heerka wp-config.php.

Faylkan la'aantiis, dab-damisku ma bilaaban karo; waxay la mid tahay inaad quful rakibtay laakiin furaha lama gelin karo.

Ikhtiyaarka 1: Wax ka beddelka oggolaanshaha hal-guji iyada oo loo marayo guddiga xakamaynta (BT Panel/)HestiaCP/cPanel)

Haddii aad isticmaaleyso BT Panel, waa tan ugu fudud. Tag boggaaga internetka, hel bogga u dhigma, dhagsii Settings, ka dibna tag Ogolaanshaha Hagaha. U beddel ogolaanshaha xididka hagaha bogga internetka 755 iyo dhammaan ogolaanshaha faylasha 644. Kadib hubi haddii isticmaalaha shaqeynaya uu yahay "www"; haddii kale, beddel. Guji badhanka "Ogolaanshaha Dayactirka", sug inuu dhammaado, cusbooneysii Wordfence, oo isku day mar kale.

Wixii HestiaCP ah, tag bogga wax ka beddelka bogga oo awood u yeelo ikhtiyaarka la yiraahdo "U oggolow gelitaanka qoritaanka xididka shabakadda". Kadib socodsii dhowr amarro SSH ah si aad u mideyso milkiilaha iyo rukhsadaha buugga bogga shabakadda.

chown -R admin:www-data /home/admin/web/你的域名/public_html
chmod -R 755 /home/admin/web/你的域名/public_html
find /home/admin/web/你的域名/public_html -type f -print0 | xargs -0 chmod 644

cPanel waa mid aad u dareen badan. Fur maamulaha faylka, shid "Muuji faylasha qarsoon" geeska sare ee midig, midig-guji buugga oo rukhsadaha u beddel 755, u beddel rukhsadaha faylka 644, waxaana sidoo kale jira shaqo lagu hagaajinayo milkiilaha faylka ikhtiyaarrada horumarsan.

Ikhtiyaarka 2: Gacanta ku beddel rukhsadaha iyada oo loo marayo SSH (guud ahaan)Linux)

Haddii guddiga kantaroolku uusan qaban karin, isticmaal SSH gacanta. Marka aad ku xirto server-ka, marka hore midee lahaanshaha. Deegaanka LNMP/LEMP, kooxda waqtiga socodsiinta shabakadu badanaa waa www-data ama www.

chown -R 你的面板用户:www-data /网站根目录完全路径

Kadib u deji rukhsadaha faylka 755 iyo rukhsadaha faylka 644.

find /网站根目录 -type d -print0 | xargs -0 chmod 755
find /网站根目录 -type f -print0 | xargs -0 chmod 644

Ka dib marka hawshu dhammaato, ku celi gadaal-gadaasha WP oo dib u shid dab-damiska; waxay u badan tahay inay xalliso arrinta.

Ikhtiyaarka 3aad: Gacanta ku samee wordfence-waf.php (xal dilaa ah marka rukhsadaha la xiro)

Haddii aadan waxba ka beddeli karin guddiga SSH, gacanta ku samee. Samee fayl la yiraahdo wordfence-waf.php oo ku jira galka xididka oo ku dheji koodka soo socda.

<?php
if (!defined('WFWAF_VERSION')) {
    define('WFWAF_VERSION', '7.11.0');
}
$wafConfig = array(
    'wafAutoPrepend' => true,
    'wafFile' => __FILE__,
    'wpContentDir' => dirname(__FILE__) . '/wp-content',
    'wpPluginsDir' => dirname(__FILE__) . '/wp-content/plugins',
    'wafLogDir' => dirname(__FILE__) . '/wp-content/wflogs',
);
require_once $wafConfig['wpPluginsDir'] . '/wordfence/lib/waf/waf.php';

Xasuuso inaad nooca 7.11.0 ku beddesho nooca Wordfence ee aad hadda haysato. U deji rukhsadaha faylka 644, mulkiiluhuna waa inuu la mid noqdaa bogga internetka. Kadib wax ka beddel wp-config.php oo ku dar sadarrada soo socda ee ugu sarreeya faylka.

require_once 'wordfence-waf.php';

Keydi oo cusbooneysii Wordfence. Dab-damisku si toos ah ayuu u aqoonsan doonaa oo khaladaadka dambe ma soo sheegi doono.

Ikhtiyaarka 4: Hubi xeerarka xaddidaya gelitaanka qoraalka.

Mararka qaar ma aha arrin ogolaansho ah, laakiin waa faylka habaynta ee xannibaya. Fur faylkaaga .htaccess oo tirtir dhammaan xeerarka xaddidaya gelitaanka qorista faylka ama ka hortagaya abuurista faylka PHP. Nginx, hubi habaynta boggaaga xayiraadaha sida akhrinta wadada xididka oo keliya ama create_file ka saar, oo ka saar.

Xaalad kale ayaa ah in martigeliyaha casriga ah ama martigeliyaha daruuraha fudud uu xaddido soo saarista faylasha PHP ee ku jira galka xididka. Xaaladdan oo kale, waxaad u baahan tahay inaad la xiriirto bixiyahaaga martigelinta si aad uga saarto xayiraadda, ama aad u beddesho qaabka ilaalinta ee Wordfence. Tag liiska Wordfence, Dhammaan Xulashooyinka, WAF, oo u beddel habka ilaalinta mashiinka ilaalinta Ilaalinta Dheer si aad uga gudubto abuurista faylka xididka.

Xalka 5aad: Khilaafaadka Plugin-ka oo sababa xannibaadda

Qaar ka mid ah plugins-ka kaydinta ama amniga ayaa laga yaabaa inay xannibaan hawlgalkan. Si ku meel gaar ah u jooji plugins-ka kaydinta sida WP Rocket, W3 Total Cache, iyo LiteSpeed ​​​​Cache, iyo sidoo kale plugins-ka amniga sida Sucuri iyo iThemes Security. Kadib nadiifi kaydka server-ka iyo opcache, oo dib u bilow adeegga PHP.

systemctl restart php8.3-fpm

Taxanaha xallinta dhibaatooyinka degdegga ah (waxaa lagugula talinayaa inaad raacdo tallaabooyinka si isku xigta)

Waxaan kugula talinayaa inaad raacdo amarkan si aad uga fogaato inaad wax khaldato. Marka hore, midee rukhsadaha iyo lahaanshaha; tani waxay leedahay fursadda ugu sarreysa ee lagu xallin karo dhibaatada. Haddii taasi shaqayn weydo, dib u bilow PHP-FPM oo dib u cusbooneysii qaybta dambe. Haddii taasi weli shaqayn weydo, gacanta ku samee fayl cusub oo wax ka beddel wp-config. Kadib hubi haddii habayntaada Nginx ama Apache ay xannibayso abuurista faylasha PHP cusub ee ku jira galka xididka. Ugu dambeyntii, tixgeli inaad beddesho qaababka dab-damiska.

Hal shay oo aan ku xasuusinayo waa inaadan waligaa rukhsadaha u dejin 777. Rukhsadaha faylku waa inay ahaadaan 755 iyo rukhsadaha faylalka 644; taasi waa heerka. Dejinta rukhsadaha 777 waxay si toos ah u soo bandhigi doontaa boggaaga internetka, taasoo keeni doonta khatar amni oo aad u sarreysa. Haddii lagu jabsado, aad bay u daahaysaa inaad ka qoomamayso.

Run ahaantii, ma hubo in xalalkani ay u shaqeyn doonaan xaaladdaada, laakiin waxaan la wadaagay dabinnada aan la kulmay iyo hababka aan ku ogaaday. Haddii aad hesho farriimo kale oo khalad ah, qaado shaashadda oo ii soo dir, aniguna mar kale ayaan eegi doonaa.

Maadaama aad ilaa hadda akhriday, haddii aad u aragtay mid waxtar leh, fadlan like saar oo la wadaag. Haddii aad rabto inaad marka hore hesho warar cusub, waad ila soo raaci kartaa!

Waad ku mahadsan tahay akhrinta maqaalkayga. Waan ku soo laaban doonaa marka xigta.