[شرح] : اظهار عناكب البحث بدون هاكات

SH3A3-Q · 6 مايو 2009

السلام عليكم ورحمه الله وبركاته

قد ظهر فى الفتره الاخيره اختراق المواقع والمنتديات عن طريق

هاك اظهار عناكب البحث فى الرئيسيه

وهذا عن طريق محركات البحث يتم حقن الهاك بعناكب سامه بدلا من عناكب البحث

وان لم يكن موقعك فهو يتم عن طريق موقع معك فى السيرفر ويتم اختراق موقعك

عن طريق هذي الثغره

نبدأ بالشرح

بسم الله الرحمن الرحيم

اليكم الكود لجميع النسخ

عمل الهاك :
- يقوم بإظهار الــ Spiders في الصفة الرئيسية لموقعك .

لمشاهدة مثال أضفط هنا

شرح طريقة التركيب :-

في ملف index.php الموجود داخل مجلد المنتدي الرئيسي إبحث عن

رمز PHP:

'eventcache'

اضف بعده

رمز PHP:

'wol_spiders',

وابحث عن

رمز PHP:

$numberguest = 0;

واضف بعده

رمز PHP:

$numberspiders = 0;

ثم إبحث عن

رمز PHP:

$forumusers = $db->query_read_slave("
SELECT
user.username, (user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . ") AS invisible, user.usergroupid,
session.userid, session.inforum, session.lastactivity,
IF(displaygroupid=0, user.usergroupid, displaygroupid) AS displaygroupid
FROM " . TABLE_PREFIX . "session AS session
LEFT JOIN " . TABLE_PREFIX . "user AS user ON(user.userid = session.userid)
WHERE session.lastactivity > $datecut
" . iif($vbulletin->options['displayloggedin'] == 1 OR $vbulletin->options['displayloggedin'] == 3, "ORDER BY username ASC") . "
");

و استبدله بالتالي

رمز PHP:

$forumusers = $db->query_read_slave("
SELECT
user.username, (user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . ") AS invisible, user.usergroupid,
session.userid, session.inforum, session.lastactivity, session.useragent,
IF(displaygroupid=0, user.usergroupid, displaygroupid) AS displaygroupid
FROM " . TABLE_PREFIX . "session AS session
LEFT JOIN " . TABLE_PREFIX . "user AS user ON(user.userid = session.userid)
WHERE session.lastactivity > $datecut
" . iif($vbulletin->options['displayloggedin'] == 1 OR $vbulletin->options['displayloggedin'] == 3, "ORDER BY username ASC") . "
");

ثم ابحث عن

PHP:

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]if (![/COLOR][COLOR=#0000BB]$userid[/COLOR][COLOR=#007700])
        {    [/COLOR][COLOR=#FF8000]// Guest
            [/COLOR][COLOR=#0000BB]$numberguest[/COLOR][COLOR=#007700]++;
            [/COLOR][COLOR=#0000BB]$inforum[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]"$loggedin[inforum]"[/COLOR][COLOR=#007700]]++;
        } 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

واستبدله بالتالي

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]if (![/COLOR][COLOR=#0000BB]$userid[/COLOR][COLOR=#007700])
  {    [/COLOR][COLOR=#FF8000]// Guest or spider
  [/COLOR][COLOR=#007700]if (!empty([/COLOR][COLOR=#0000BB]$vbulletin[/COLOR][COLOR=#007700]->[/COLOR][COLOR=#0000BB]wol_spiders[/COLOR][COLOR=#007700]))
  {
  if ([/COLOR][COLOR=#0000BB]preg_match[/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]'#(' [/COLOR][COLOR=#007700]. [/COLOR][COLOR=#0000BB]$vbulletin[/COLOR][COLOR=#007700]->[/COLOR][COLOR=#0000BB]wol_spiders[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'spiderstring'[/COLOR][COLOR=#007700]] . [/COLOR][COLOR=#DD0000]')#si'[/COLOR][COLOR=#007700], [/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'useragent'[/COLOR][COLOR=#007700]], [/COLOR][COLOR=#0000BB]$agent[/COLOR][COLOR=#007700]))
  {
    [/COLOR][COLOR=#0000BB]$numberspiders[/COLOR][COLOR=#007700]++;
    [/COLOR][COLOR=#0000BB]$agent [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]strtolower[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$agent[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]1[/COLOR][COLOR=#007700]]);
    [/COLOR][COLOR=#0000BB]$spider [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$vbulletin[/COLOR][COLOR=#007700]->[/COLOR][COLOR=#0000BB]wol_spiders[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'agents'[/COLOR][COLOR=#007700]][[/COLOR][COLOR=#DD0000]"$agent"[/COLOR][COLOR=#007700]];
    [/COLOR][COLOR=#0000BB]$key [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$spider[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'name'[/COLOR][COLOR=#007700]];
    if([/COLOR][COLOR=#0000BB]array_key_exists[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$key[/COLOR][COLOR=#007700],[/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700]))
    {
      [/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$key[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$key[/COLOR][COLOR=#007700]] + [/COLOR][COLOR=#0000BB]1[/COLOR][COLOR=#007700];
    }
    else
    {

      [/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]$key[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]1[/COLOR][COLOR=#007700];

    }
  }
  else
  {
    [/COLOR][COLOR=#0000BB]$numberguest[/COLOR][COLOR=#007700]++;
  }
  [/COLOR][COLOR=#0000BB]$inforum[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]"$loggedin[inforum]"[/COLOR][COLOR=#007700]]++;
  }

  } 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

وابحث عن

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]    $totalonline [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$numberregistered [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberguest[/COLOR][COLOR=#007700]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

واستبدله بالتالي

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]   $totalonline [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$numberregistered [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberguest [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberspiders[/COLOR][COLOR=#007700]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

ثم ابحث عن 

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]if ([/COLOR][COLOR=#0000BB]fetch_online_status[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700]))
  {
  [/COLOR][COLOR=#0000BB]$numbervisible[/COLOR][COLOR=#007700]++;
  eval([/COLOR][COLOR=#DD0000]'$activeusers .= ", ' [/COLOR][COLOR=#007700]. [/COLOR][COLOR=#0000BB]fetch_template[/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]'forumhome_loggedinuser'[/COLOR][COLOR=#007700]) . [/COLOR][COLOR=#DD0000]'";'[/COLOR][COLOR=#007700]);
  }
  } 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

واضف بعده


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]while ([/COLOR][COLOR=#0000BB]$spidername [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]current[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700]))
  {
  if ([/COLOR][COLOR=#0000BB]$spidername [/COLOR][COLOR=#007700]> [/COLOR][COLOR=#0000BB]1[/COLOR][COLOR=#007700]) {
  [/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'musername'[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]trim[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]key[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700])) . [/COLOR][COLOR=#DD0000]"(" [/COLOR][COLOR=#007700]. [/COLOR][COLOR=#0000BB]$spidername[/COLOR][COLOR=#007700].[/COLOR][COLOR=#DD0000]")"[/COLOR][COLOR=#007700];
  }
  else
  {
  [/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'musername'[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]trim[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]key[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700]));
  }
  [/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'userid'[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];
  eval([/COLOR][COLOR=#DD0000]'$activeusers .= ", ' [/COLOR][COLOR=#007700]. [/COLOR][COLOR=#0000BB]fetch_template[/COLOR][COLOR=#007700]([/COLOR][COLOR=#DD0000]'forumhome_loggedinuser'[/COLOR][COLOR=#007700]) . [/COLOR][COLOR=#DD0000]'";'[/COLOR][COLOR=#007700]);
  [/COLOR][COLOR=#0000BB]next[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$spiderlist[/COLOR][COLOR=#007700]); 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					



}

-------------------------------------------------------------------------

في ملف
Online.php

ابحث عن



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]while ([/COLOR][COLOR=#0000BB]$users [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$db[/COLOR][COLOR=#007700]->[/COLOR][COLOR=#0000BB]fetch_array[/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$allusers[/COLOR][COLOR=#007700])) 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

اضف اعلاه



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]$numberspiders [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700];
[/COLOR][COLOR=#0000BB]$numberguests [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]0[/COLOR][COLOR=#007700]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

و ابحث عن



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]$guests[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]"$count"[/COLOR][COLOR=#007700]][[/COLOR][COLOR=#DD0000]'spidertype'[/COLOR][COLOR=#007700]] = [/COLOR][COLOR=#0000BB]$spider[/COLOR][COLOR=#007700][[/COLOR][COLOR=#DD0000]'type'[/COLOR][COLOR=#007700]]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

و اضف اسفله


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]$numberspiders [/COLOR][COLOR=#007700]++; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

و ابحث عن


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]$totalonline [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$numbervisible [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberguests[/COLOR][COLOR=#007700]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

و استبدله بالتالي:



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]$numberguests [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$numberguests [/COLOR][COLOR=#007700]- [/COLOR][COLOR=#0000BB]$numberspiders[/COLOR][COLOR=#007700];
[/COLOR][COLOR=#0000BB]$totalonline [/COLOR][COLOR=#007700]= [/COLOR][COLOR=#0000BB]$numbervisible [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberguests [/COLOR][COLOR=#007700]+ [/COLOR][COLOR=#0000BB]$numberspiders[/COLOR][COLOR=#007700]; 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

-------------------------------------------------------------------------

افتح قالب

forumhome_loggedinuser

و استبدل محتواه بلتالي


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700][/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]musername[/COLOR][COLOR=#007700]][/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]invisiblemark[/COLOR][COLOR=#007700]][/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]buddymark[/COLOR][COLOR=#007700]][/COLOR][COLOR=#0000BB]$loggedin[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]musername[/COLOR][COLOR=#007700]] 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

-------------------------------------------------------------------------------

في قالب

forumhome

ابحث عن


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700][/COLOR][COLOR=#0000BB]$vbphrase[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]currently_active_users[/COLOR][COLOR=#007700]]: [/COLOR][COLOR=#0000BB]$totalonline [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$vbphrase[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]x_members_and_y_guests[/COLOR][COLOR=#007700]]) 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

و استبدله بالتالي



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700][/COLOR][COLOR=#0000BB]$vbphrase[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]currently_active_users[/COLOR][COLOR=#007700]]: [/COLOR][COLOR=#0000BB]$totalonline [/COLOR][COLOR=#007700]([/COLOR][COLOR=#0000BB]$vbphrase[/COLOR][COLOR=#007700][[/COLOR][COLOR=#0000BB]x_members_and_y_guests[/COLOR][COLOR=#007700]]) 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

--------------------------------------------------------------------------------

في قالب

	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]WHOSONLINE 
[/COLOR][/COLOR]		[/LEFT]
					

ابحث عن



	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]2[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#DD0000]"$numberguests" 
[/COLOR][COLOR=#0000BB][/COLOR][/COLOR]		[/LEFT]
					

اضف بعده




	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB] 3[/COLOR][COLOR=#007700]=[/COLOR][COLOR=#DD0000]"$numberspiders 
[/COLOR][/COLOR]		[/LEFT]
					

"

=============================================

من اللغات ابحث عن العبارة


	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB]phrase x_members_and_y_guests 
[/COLOR][/COLOR]		[/LEFT]
					


وترجمها إلي الآتي




	رمز PHP:
							[LEFT]			[COLOR=#000000][COLOR=#0000BB][/COLOR][COLOR=#007700]{[/COLOR][COLOR=#0000BB]1[/COLOR][COLOR=#007700]} [/COLOR][COLOR=#0000BB]أعضاء و [/COLOR][COLOR=#007700]{[/COLOR][COLOR=#0000BB]2[/COLOR][COLOR=#007700]} [/COLOR][COLOR=#0000BB]زوار و [/COLOR][COLOR=#007700]{[/COLOR][COLOR=#0000BB]3[/COLOR][COLOR=#007700]} [/COLOR][COLOR=#0000BB]الــ عنكبوت 
[/COLOR][/COLOR]		[/LEFT]
					


واي استفسار انا حاضر

[EMAIL="egy@egytaz.com"]egy@egytaz.com[/EMAIL]

[EMAIL="support@aldeerhost.com"]support@aldeerhost.com[/EMAIL]


تحياتي للجميع

[شرح] : اظهار عناكب البحث بدون هاكات

SH3A3-Q

ابو الميرزا