Recently I have a few websites frequently being hacked by hacker. Once it is being hacked, the hacker will upload a series of "hacker" files into the server root folder. After I cleaned the website, it will happen again several months later. This happen repeat again and again.

The problem is I don't know how the website is being hacked. Is it possible for us to use Laravel log to do the tracing of hacking? If yes, how can we do it?

CodePudding user response：

Your problem sounds like XSS issues: cross-scripting via any kind of input fields or parameters passed in the URL and/or form POST that are not protected. The other aspect if to check if the different passwords are strong enough.