Is your WordPress website visited by bots using your website’s search feature using any phrases below?
- /Index/\think\app/invokefunction
- /aa/bb/name/${@print(md5(chaonan))}
- /Index/\think\Container/invokefunction
- /user/\think\app/invokefunction
- admin/\think\app/invokefunction
- api/\think\app/invokefunction
- index/\think\app/invokefunction
- index/\think\Container/invokefunction
- \think\app/invokefunction
Don’t panic or fret, though. In this step-by-step tutorial, I will guide you through denying and disallowing these search phrases that threaten your WordPress website’s security.