Snipaste_2026-03-28_23-14-50.png

193.1 KB

2026.3.28 DaFu Lottery Linux Edition Website Maintenance Log
Maintenance Time: 2026-03-28

Maintenance Content: Addressed the issue of a one-line PHP webshell being injected into the backend “Category Management / Help Center Categories” section.
During this inspection, it was discovered that the category name field in the database table caipiao_category had been injected with malicious PHP code, which then generated an anomalous backdoor file through the caching mechanism. Investigation identified the entry point as the add and edit functionality in the backend Help Center category management.
The following maintenance work has been completed: First, cleaned up the malicious category content from the database and restored the Help Center category names and hierarchy to normal; Second, deleted the cache-generated anomalous files and any backdoor files written to disk; Third, added dangerous content interception to the backend category management functionality to prevent further PHP malicious code injection; Fourth, verified that the related anomalous files can no longer be accessed externally.
Maintenance Result: The malicious category content has been cleared, anomalous backdoor files have been deleted, the Help Center categories have been restored to normal, and the related risk entry points have been fortified. The website is currently operating normally.
Server Hardening: Firewall installed, server hardened, server password changed, database password changed, control panel password changed