PHP2Shell akked umedya n uxatar n WordPress Multisite
Taluft n tɣellist PHP2Shell i d-yettbanen melmi d asmekti iwatan belli taɣellist n WordPress ur tettwaserḥes ara kan ɣer ul n WordPress, isental akked isiɣzaf. Mi ara tawi yiwet n tɣellist PHP runtime, ad tili ddaw n uselkim n usnas i yesɛeddan yal asmel ɣef uqeddac. Ilmend n twila PHP i yettwaḥazen akked tewtilin ilaqen i useqdec n tɣellist, yiwen n uḍar yedda akken iwatan yezmer ad yefk abrid i umeɣnas akken ad iselkem tiludna neɣ tangalt ur nettwaṛǧan ara deg uswir n uqeddac.
I yiwen n usmel WordPress i yettwasbedden iman-is, aya d lmeɛna meqqren. I yiwen n uẓeṭṭa WordPress Multisite, amḍiq n wuguren yezmer ad yili d ameqqran aṭas. Yiwet n twennaḍt PHP tezmer ad tesɛeddi aẓeṭṭa n yismal n yimeddukal, tḥuna n tnezzut, isemlen n usiweḍ, akked tibbura n umultawi. Aya yettarr asnifel arurad, s wudem yemṣadan, d aḥric agejdan n usnefti n usnezdin Multisite s tresponsabilite — mačči d tawuri n useqdec ara yettraǧun almi d akud iwatan.
Acuɣer tɣellisin PHP sɛant asemɛeṛ meqqren deg uẓeṭṭa
Multisite yettwasnulfa akken ad yerr tessefrak n waṭas n yismal n web d taffa: ifuyla n ul i yettwaḥdukken, isiɣzaf i yettwaḥdukken, isental i yettwaḥdukken, akked tesedbelt talemmast n uẓeṭṭa ssenqsen lecɣal yettuɣalen. Tamsisɣelt-nni n tmeẓli n tɣeẓza tesɛa anamek belli yiwen n wugur n tneɣrit yettwassersen ilaq ad yettwaseqdec am tadyant i yeḥwan aẓeṭṭa meṛṛa.
Asteqsi n tidet mačči kan ma yella bab n usmel asuf yessebded lqem aneggaru. D ma yella tneɣrit n usnezdin tessaweḍ ɣer lqem PHP i yettwaḥazen, tesbed akemmus n uneṣref deg tneɣrit iwatan, u tsermed belli runtime yettwaleqqmen isɛeddi isemlen n yimeddukal. Tineggura zemrent ad ǧǧent yal asmel i yesqedcen tawennaḍt yettwaḥazen yeldi i wakken s ugar n wakud.
Tiririt yettwasselḥen tesra daɣen ad tili tella gar tazzla akked usenqed. Isenfaṛen ilaq ad walin tizmilin n lqem PHP akked ulɣu, ad sbedden akemmus yettwasegmen s ukala-nsen n usnifel, ad ssenqden lqem PHP yettwasqedcen, ad ḍefren iɣmisen n tuccḍiwin akked taddart n umeẓlu, u ad ssawḍen isallen i yimeddukal ma yella ilaq tigawt seg tama-nsen. Deg waṭas n tegnatin, imeddukal ur ilaq ara ad ttazzalen deffir n lqem n tɣellist arurad n runtime, asmel s usmel.
Ayen ilaq ad xedmen yinedbalen n WordPress Multisite
Xas ma yella usnezdin i yettɛeddan lqem PHP, inedbalen n uẓeṭṭa ilaq ad sqedcen tadyant-a d tagnit akken ad sentmen tagnit-nsen n tɣellist:
- Sentem lqem PHP yettwasqedcen akked usnezdin-nwen, u ḥeqqeq belli yegber aseɣti PHP2Shell n uneṣref.
- Ḥrez WordPress ul, isiɣzaf yettwasermden deg uẓeṭṭa, isental, akked isiɣzaf must-use d ileqman akken ur ttimsefraken ara yixataren n uswir n usnas akked wugur n tneɣrit.
- Seqdec anekcum s wazal adday i yimiḍanen n usnezdin, SFTP/SSH, taffa n yisefka, akked inedbalen n WordPress.
- Ḥrez ikalasen n uḥraz akked tarrayin n tririt i yettwaɛerḍen i yifuyla n uẓeṭṭa akked taffa n yisefka.
- Ḍfer armud ur nelli d amagnu am yimiḍanen n unedbal ur nettwassen, ibeddilen ur nettwaṛǧan ara deg ifuyla, tuccḍiwin PHP ur telli d timagnutin, neɣ tuttriwin i tuffɣa.
- Jerred ɣer yisallen n tɣellist n usnezdin akked PHP akken tiseddarin n tɣellist ad ilint ɣef ulɣu unṣib akked yisallen n lqem, mačči ɣef yisefkaren.
Yezmer daɣen ad yili d ameqqran ad tḥadrem tiri n ugar n tuɣalin ɣer yixef. Ma yella yiwen n uẓeṭṭa yettwaḥaz neɣ ala, aya icudd ɣer lqem-is PHP, tawila n uqeddac, akked ubrid n tangalt yettwaḥazen i d-yettwasegzan deg ulɣu unṣib. Tarrayt iwatan d asenqed arurad akked useɣti — mačči d asgunfu.
Aseɣti yettusefrek d aḥric n umeẓlu
I wid i yesnen tansa n web am umeẓlu, tella tɛellimt akked tɣellist d aḥric n ufaris i tzemrem ad tzemzemt. Imeddukal ṛaǧun belli isemlen-nsen ad qqimen yellan, ma d tarbaɛt n tneɣrit ad tessefrak aseɣti n tneɣrit sdat n wallen-nsen. Yiwen n usnezdin Multisite ilaq ad yesɛu ameslay afessas n lqem PHP iruraden, akala n usbeddi yettwaɛerḍen, akked tarrayt i useqdec n usenqed belli aseɣti yella deg umḍiq.
D aya i nesnedd ɣef usnezdin Ultimate Multisite. Aseɣti PHP2Shell yettwasbed u yettwaseɣti deg umeẓlu-nneɣ n usnezdin deg semmus n yisragen kan seld aseffeɣ n lqem PHP amaynut. Ma tebɣam yiwet n tneɣrit WordPress Multisite i yettwasnulfan i temhalin yettuɣalen akked tiririt taruradt ɣef tɣellist, waliɣ usnezdin Ultimate Multisite u bnu aẓeṭṭa-nwen n yismal d amaynut s tɣellist.
Aru awennit