Linux服务器php木马排查及加固(3)
日期:2011-07-22
点击:205
来源: 未知
分享至:
$path = $jkdir.\'/\'.$f;
if(is_dir($path)){ record_md5($path); }else{ $file_list[$path]=md5_file($path); } } } } } function Safe_Check($jkdir) { global $danger ,$suffix ,$jkdir_num ,$file_num ,$danger_num; $hand=@dir($jkdir) or die(\'文件夹不存在\') ; while ($file=$hand->read()) { $filename=$jkdir.\'/\'.$file; if (!$jumpoff) { if(Jump($filename))continue; } if(@is_dir($filename) && $file != \'.\' && $file!= \'..\'&& $file!=\'./..\') { $jkdir_num++; Safe_Check($filename); } if (preg_match_all ("/.($suffix)/i",$filename,$out)) { $str=\'\'; $fp = @fopen($filename,\'r\')or die(\'没有权限\'); while(!feof($fp)) { $str .= fgets($fp,1024); } fclose($fp); if( preg_match_all ("/($danger)[ rnt]{0,}([[(])/i",$str,$out)) { echo "<font color=\'green\' style=\'font-size:14px\'>可疑文件:{$filename}</font>"." 创建时间:".date("Y-m-d H:i:s",filectime($filename))." 修改时间:".date("Y-m-d H:i:s",filemtime($filename))." <a href=\'?readfile={$filename}\' target=\'_blank\'><u>查看代码</u></a> <a href=\'?m=del&filename=$filename\' target=\'_blank\'>删除</u></a><br>"; $danger_num++; } } $file_num++; } } function Edit() { global $filename; $filename = str_replace("..","",$filename); $file = $filename; $content = ""; if(is_file($file)) { $fp = fopen($file,"r")or die(\'没有权限\'); $content = fread($fp,filesize