- ZANIN Yanar GizoME ZA MU YI MAKA
- NASARAMUNA BUKATAR YI
- FarashinKARANCIN FARASHIN GIDAN MU
- TUNTUBEBAYANIN KYAUTA
Shahararren plugin ɗin WordPress mai suna "Sauƙaƙan WP SMTP Plugin" tare da ingantaccen shigarwa sama da dubu ɗari kawai an gano haɗari, wanda ke bawa maharin damar ya mallaki wani shafi. Laifin da ke cikin wannan plugin ɗin WordPress yana ba da damar Cyberpunks, maido da kalmar wucewa ta mai gudanarwa kuma sami cikakken izini don gidan yanar gizon.
Lalacewar da aka gano yana cikin fayil ɗin rajistar kuskure, wanda ke da rauni saboda ƙaƙƙarfan aibi a cikin yadda plugin ɗin ke sarrafa babban fayil. Plugin babban fayil akan uwar garken tare da fayiloli, masu amfani da za a riƙe, wanda yawanci yana ƙunshe da fanko fayil ɗin index.html. Manufar wannan fayil shine don, don hana wani yin haka, don kewaya zuwa wannan babban fayil kuma gano jerin fayiloli a cikin wannan kundin adireshi.
Idan kowa yana kallon wannan jerin fayilolin, yana iya shiga waɗannan fayilolin, menene matsalar.
Babban fayil, inda wannan fayil ɗin log ɗin gyara ya wanzu, ba ya ƙunshi fayil index.html. A kan sabobin, akan wanda ba a kashe lissafin kundin adireshi ba, mugun mutum na iya samun damar shiga wannan fayil ta tsohuwa.
Da farko, suna samun sunan mai amfani matakin admin daga rukunin yanar gizon WordPress. Suna gwadawa, hack ta amfani da sanannun hanyoyin.
Daga nan sai su je shafin shiga WordPress kuma su gabatar da buƙatun sake saitin kalmar sirri ta asusun admin.
Hakanan suna samun damar yin amfani da fayilolin log ɗin gyara kuskure kuma suna dawo da hanyar saitin kalmar sirri, wanda shafin WordPress ya aiko. Idan kun shiga wannan hanyar, shigar da shi, sake saita kalmar wucewa sannan ku ji daɗin cikakken damar shiga rukunin yanar gizon.
Wannan plugin ɗin rashin lahani yana kula da canji, wanda ke rikodin duk canje-canje a kowane sabuntawa. Dole ne a karanta rubutun canji, don mai amfani ya gane, wanda update za a yi.
Lokacin da aka gano rauni, da plug-in developers yawanci lura, da cewa za a faci rauni. Wannan yana ba wa mai haɓaka WordPress bayanin, cewa yana bukata, don yanke shawara mai ilimi. A canji, wanda ke sanar da mawallafi game da shi, cewa sabuntawa yana haifar da raunin tsaro, damar mai bugawa, don yin yanke shawara game da sabunta plugin ɗin, don gujewa harin hacker.
Ana ba da shawarar sosai, cewa duk masu amfani da Easy WP SMTP plugin haɓakawa zuwa sigar da ta fi girma fiye da sigar 1.4.2 sabunta.
ƙwararru ne suka tsara gidan yanar gizo mai inganci, ƙwararru ne suka haɓaka kuma kwararru suka aiwatar da su. Gaskiya ga wannan taken, muna aiki a ONMA Scout tare da mafi kyawun mafi kyau. Kuna iya dogara ga cikakken sabis na hukuma, manyan yanayi da ƙwararrun sabis na masu zanen gidan yanar gizon mu, Barin masu shirye-shirye da masu haɓaka gidan yanar gizo.