Hallo,
ich hatte vor paar tagen das problem, das meine Seiten gehackt wurden sind (alle die die auf dem gleichen PHP-Nutzer liefen)
Es wurde in JEDER .php datei ein codiertet code eingefügt.
Wenn ich die Logs richtig gelesen habe, hat das bei Roundcubemail angefangen.
[Thu Jul 17 23:34:19.427448 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/PEAR.php on line 1
[Thu Jul 17 23:34:19.427513 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/PEAR5.php on line 1
[Thu Jul 17 23:34:19.427520 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/include/bc.php on line 1
[Thu Jul 17 23:34:19.427526 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube_utils.php on line 1
[Thu Jul 17 23:34:19.427533 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/include/rcmail_output.php on line 1
[Thu Jul 17 23:34:19.427539 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube_output.php on line 1
[Thu Jul 17 23:34:19.427545 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/include/rcmail_html_page.php on line 1
[Thu Jul 17 23:34:19.427552 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/include/rcmail_output_html.php on line 1
[Thu Jul 17 23:34:19.427558 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube_washtml.php on line 1
[Thu Jul 17 23:34:19.427564 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube_html2text.php on line 1
[Thu Jul 17 23:34:19.427571 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/include/rcmail.php on line 1
[Thu Jul 17 23:34:19.427577 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube.php on line 1
[Thu Jul 17 23:34:19.427583 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/program/lib/Roundcube/rcube_config.php on line 1
[Thu Jul 17 23:34:19.427590 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/config/defaults.inc.php on line 1
[Thu Jul 17 23:34:19.427615 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /var/customers/webs/dermatze/mail/config/config.inc.php on line 1
[Thu Jul 17 23:34:19.427621 2014] [fcgid:warn] [pid 32023] [client 31.165.57.62:64387] mod_fcgid: stderr: PHP Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback
Kann es sein, das es irgendeine Schwachstelle in der pear.php gab?
Ich hatte immer noch die 1.0-GIT version.
