下班后六点多回到家，打开森林，突然发现有点不对劲。网站和论坛的首页的IE状态栏里都显示js错误，这明显是不应该的。
右键查看源文件，发现这么行代码
</p></blockquote> <p>很明显，网站的FTP被人控制了并修改了文件。</p> <p>赶紧登陆FTP，仔细查看，终于发现是今天下午四点多发生的事情，论坛首页、网站首页、网站主页，三个文件被修改。</p> <p>我怕那行框架网页里面有木马，这就太对不起森林的网友们了，用flashget下过来看了一下，还好，就放了个51la的统计。</p> <p>PS，刚和那人聊了，是论坛的漏洞。</p> <p>倒没什么恶意，借点流量刷那个破站的排名……</p> <p>discuz的插件害人啊……</p> <p>正在升级论坛中，然后什么插件都不装了，论坛嘛就是交流用的，弄些乱七八糟的干吗？</p> <p>莫非我也要开始研究黑客技术了？从哪开头呢？</p> <p><img src="http://www.blog555.com/attachments/month_0611/e20061115192847.JPG" border="0" alt=""/></p> <div class="fixed"></div> </div> <div class="comments comments_single"> <a href="#respond">发表评论</a> | <a href="http://www.blog555.com/549.html/trackback" rel="trackback">Trackback</a> </div> <!-- related posts START --> <!-- related posts END --> </div> <script type="text/javascript" src="http://www.blog555.com/wp-content/themes/elegant-box/js/comment.js"></script> <!-- comments START --> <ol class="commentlist"> <li class="comment " id="comment-273"> <div class="userinfo"> <div class="userpic"><img alt='' src='http://0.gravatar.com/avatar/?d=wavatar&s=24' class='avatar avatar-24 photo avatar-default' height='24' width='24' /></div> <div class="usertext"> <div class="username"> <span id="commentauthor-273"> Ouou </span> </div> <div class="date">2006年11月17日22:45</div> </div> <div class="count"> <a rel='nofollow' class='comment-reply-link' href='/549.html?replytocom=273#respond' onclick='return addComment.moveForm("comment-273", "273", "respond", "549")'>回复</a> | <a href="javascript:void(0);" onclick="CMT.quote('commentauthor-273', 'comment-273', 'commentbody-273', 'comment');">引用</a> | <a href="#comment-273">#1</a> </div> <div class="fixed"></div> </div> <div class="comment_text"> <div id="commentbody-273"><p>我也说不上来,不太确定!当时看到帖子也很惊讶!<br /> 只要坛子好了就行,不管怎样给大家添麻烦了,希望一切尽快恢复平静!</p> </div> </div> </li> <li class="comment " id="comment-272"> <div class="userinfo"> <div class="userpic"><img alt='' src='http://0.gravatar.com/avatar/?d=wavatar&s=24' class='avatar avatar-24 photo avatar-default' height='24' width='24' /></div> <div class="usertext"> <div class="username"> <span id="commentauthor-272"> Ouou </span> </div> <div class="date">2006年11月15日22:45</div> </div> <div class="count"> <a rel='nofollow' class='comment-reply-link' href='/549.html?replytocom=272#respond' onclick='return addComment.moveForm("comment-272", "272", "respond", "549")'>回复</a> | <a href="javascript:void(0);" onclick="CMT.quote('commentauthor-272', 'comment-272', 'commentbody-272', 'comment');">引用</a> | <a href="#comment-272">#2</a> </div> <div class="fixed"></div> </div> <div class="comment_text"> <div id="commentbody-272"><p>希望尽快解决啊~</p> </div> </div> </li> </ol> <!-- comments END --> <!-- comments navi START --> <!-- comments navi END --> <!-- trackback START --> <!-- trackback END --> <div id="respond"> <form action="http://www.blog555.com/wp-comments-post.php" method="post" id="commentform"> <!-- comment info --> <div id="comment_header"> <div id="comment_info"> <div id="author_info"> <div class="row"> <input type="text" name="author" id="author" class="textfield" value="" size="24" tabindex="1" /> <label for="author" class="small">昵称 </label> </div> <div class="row"> <input type="text" name="email" id="email" class="textfield" value="" size="24" tabindex="2" /> <label for="email" class="small">电子邮箱 (我们会为您保密) </label> </div> <div class="row"> <input type="text" name="url" id="url" class="textfield" value="" size="24" tabindex="3" /> <label for="url" class="small">网址</label> </div> </div> </div> </div> <!-- comment input --> <textarea name="comment" id="comment" tabindex="4" rows="8" cols="50"></textarea> <!-- comment submit and rss --> <div id="submitbox"> <div id="comments_rss"> <a href="http://www.blog555.com/comments/feed"> <span class="feed">订阅评论</span> </a> </div> <div class="act"> <a rel="nofollow" id="cancel-comment-reply-link" href="/549.html#respond" style="display:none;">取消</a> <input type="hidden" name="a" value="550" /><input type="hidden" name="b" value="5" /> <input type="text" name="sub" id="sub" tabindex="4" class="replytext" size="3"> <label for="sub"> 验证码: <font color="red">555</font> (必须填写，输错了内容就没了哦~)</label> <input name="submit" type="submit" id="submit" class="button" tabindex="5" value="提交评论" /> </div> <input type="hidden" name="comment_post_ID" value="549" /> <input type='hidden' name='comment_post_ID' value='549' id='comment_post_ID' /> <input type='hidden' name='comment_parent' id='comment_parent' value='0' /> <div class="fixed"></div> </div> <script type="text/javascript">var xemotion_root = "http://www.blog555.com/wp-content/plugins/x-emotions/";</script><script type="text/javascript" src="http://www.blog555.com/wp-content/plugins/x-emotions/img/for_comment.js?ver=0.1"></script><link rel="stylesheet" href="http://www.blog555.com/wp-content/plugins/x-emotions/img/style.css?ver=0.1" type="text/css" /> </form> </div> <script type="text/javascript">CMT.loadCommentShortcut('commentform', 'submit', ' (Ctrl+Enter)');</script> </div> <!-- sidebar START --> <div id="sidebar"> <!-- Style Switcher START --> <div class="widget"> <div id="styleswitcher"> <span id="style-text">主题风格: </span> <span id="style-black" class="color"><a onclick="TSS.setActiveStyleSheet('black');" href="javascript:void(0);" title="将主题风格更换为black"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <span id="style-blue" class="color"><a onclick="TSS.setActiveStyleSheet('blue');" href="javascript:void(0);" title="将主题风格更换为blue"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <span id="style-green" class="color"><a onclick="TSS.setActiveStyleSheet('green');" href="javascript:void(0);" title="将主题风格更换为green"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <span id="style-white" class="color"><a onclick="TSS.setActiveStyleSheet('white');" href="javascript:void(0);" title="将主题风格更换为white"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <span id="style-purple" class="color"><a onclick="TSS.setActiveStyleSheet('purple');" href="javascript:void(0);" title="将主题风格更换为purple"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <span id="style-brown" class="color"><a onclick="TSS.setActiveStyleSheet('brown');" href="javascript:void(0);" title="将主题风格更换为brown"><img src="http://www.blog555.com/wp-content/themes/elegant-box/images/transparent.gif" alt="" /></a></span> <div class="fixed"></div> </div> </div> <!-- Style Switcher END --> <!-- showcase --> <ul id="widgets"> <li class="widget"> <ul> <iframe width="100%" height="550" class="share_self" frameborder="0" scrolling="no" src="http://widget.weibo.com/weiboshow/index.php?width=0&height=550&fansRow=2&ptype=1&speed=0&skin=-1&isTitle=0&noborder=1&isWeibo=1&isFans=1&uid=1687183410&verifier=7d6473de&colors=d6ebf5,d6ebf5,666666,0082cb"> 七嘴八舌 正在加载... 登陆信息 注册 登录 文章 RSS RSS 评论 WordPress.org 那些花兒 79秒 ECHO姐姐 一米阳光 子曰 拧发条鸟的森林 村上春树的森林 林克斯 臧日 赤子
