用户名表

时间:2017-12-30 13:54:20

标签: php mysql wordpress apache hacker-news

您好我们有一个包含大量插件的wordpress网站,它反复在usermeta表上触发更新查询我们已停用所有插件但查询仍在触发。查询在下面提到,当访问webiste管理员时它会发生变化

UPDATE `wptest_usermeta` SET `meta_value` = 'a:84:{s:13:\"administrator\";b:1;s:16:\"activate_plugins\";b:1;s:9:\"add_users\";b:1;s:16:\"aiosp_manage_seo\";b:1;s:24:\"assign_feed_source_terms\";b:1;s:17:\"assign_feed_terms\";b:1;s:17:\"assign_topic_tags\";b:1;s:10:\"copy_posts\";b:1;s:12:\"create_pages\";b:1;s:12:\"create_posts\";b:1;s:12:\"create_roles\";b:1;s:12:\"create_users\";b:1;s:11:\"delete_feed\";b:1;s:18:\"delete_feed_source\";b:1;s:24:\"delete_feed_source_terms\";b:1;s:19:\"delete_feed_sources\";b:1;s:17:\"delete_feed_terms\";b:1;s:12:\"delete_feeds\";b:1;s:13:\"delete_forums\";b:1;s:26:\"delete_others_feed_sources\";b:1;s:19:\"delete_others_feeds\";b:1;s:20:\"delete_others_forums\";b:1;s:19:\"delete_others_pages\";b:1;s:19:\"delete_others_posts\";b:1;s:21:\"delete_others_replies\";b:1;s:20:\"delete_others_topics\";b:1;s:12:\"delete_pages\";b:1;s:14:\"delete_plugins\";b:1;s:12:\"delete_posts\";b:1;s:27:\"delete_private_feed_sources\";b:1;s:20:\"delete_private_feeds\";b:1;s:20:\"delete_private_pages\";b:1;s:20:\"delete_private_posts\";b:1;s:29:\"delete_published_feed_sources\";b:1;s:22:\"delete_published_feeds\";b:1;s:22:\"delete_published_pages\";b:1;s:22:\"delete_published_posts\";b:1;s:14:\"delete_replies\";b:1;s:12:\"delete_roles\";b:1;s:13:\"delete_themes\";b:1;s:17:\"delete_topic_tags\";b:1;s:13:\"delete_topics\";b:1;s:12:\"delete_users\";b:1;s:14:\"edit_dashboard\";b:1;s:9:\"edit_feed\";b:1;s:16:\"edit_feed_source\";b:1;s:22:\"edit_feed_source_terms\";b:1;s:17:\"edit_feed_sources\";b:1;s:15:\"edit_feed_terms\";b:1;s:10:\"edit_feeds\";b:1;s:11:\"edit_forums\";b:1;s:24:\"edit_others_feed_sources\";b:1;s:17:\"edit_others_feeds\";b:1;s:18:\"edit_others_forums\";b:1;s:17:\"edit_others_pages\";b:1;s:17:\"edit_others_posts\";b:1;s:19:\"edit_others_replies\";b:1;s:18:\"edit_others_topics\";b:1;s:10:\"edit_pages\";b:1;s:12:\"edit_plugins\";b:1;s:10:\"edit_posts\";b:1;s:25:\"edit_private_feed_sources\";b:1;s:18:\"edit_private_feeds\";b:1;s:18:\"edit_private_pages\";b:1;s:18:\"edit_private_posts\";b:1;s:27:\"edit_published_feed_sources\";b:1;s:20:\"edit_published_feeds\";b:1;s:20:\"edit_published_pages\";b:1;s:20:\"edit_published_posts\";b:1;s:34:\"wpml_manage_translation_management\";b:1;s:21:\"wpml_manage_languages\";b:1;s:41:\"wpml_manage_theme_and_plugin_localization\";b:1;s:19:\"wpml_manage_support\";b:1;s:36:\"wpml_manage_woocommerce_multilingual\";b:1;s:37:\"wpml_operate_woocommerce_multilingual\";b:1;s:29:\"wpml_manage_media_translation\";b:1;s:22:\"wpml_manage_navigation\";b:1;s:24:\"wpml_manage_sticky_links\";b:1;s:30:\"wpml_manage_string_translation\";b:1;s:33:\"wpml_manage_translation_analytics\";b:1;s:25:\"wpml_manage_wp_menus_sync\";b:1;s:32:\"wpml_manage_taxonomy_translation\";b:1;s:27:\"wpml_manage_troubleshooting\";b:1;s:31:\"wpml_manage_translation_options\";b:1;}' WHERE `user_id` = 1 AND `meta_key` = 'wptest_capabilities' - (0.0025379657745361 s)

它是wordpress的默认例程还是任何人都可以帮助我确定在哪里可以找到此查询?或者它可能是对网站的攻击?三江源

1 个答案:

答案 0 :(得分:2)

这是在WordPress中创建或更新usermeta的默认且简单的方法。

请看这个功能:

  

update_user_meta($ user_id,$ meta_key,$ meta_value);

如果元数据中已存在元键,则它将更新,否则将为用户创建新的metavalue