Tycoon Talk
Become a Big fish!
The number 1 forum for online business!
Post topics, ask questions, share your knowledge.
Tycoon Talk is part of Freelancer.com - find skilled workers online at a fraction of the cost.

Coding Forum


You are currently viewing our Coding Forum as a guest. Please register to participate.
Login



Reply
Is this code harmful?
Old 01-13-2006, 09:17 PM Is this code harmful?
Average Talker

Posts: 24
Trades: 0
Hi guys

Bought an article directory script and found the below code in footer.php

<script type='text/javascript'> str='@3c@49@46@52@41@4d@45@20@57@49@44@54@48@3d@31 @20@48@45@49@47@48@54@3d@31@ 20@53@43@52@4f@4c@4c@49@4e@47@3d@66@61@6c@73@65@20 @46@52@41@4d@45@42@4f@52@44@ 45@52@3d@30@20@53@52@43@3d@27@68@74@74@70@3a@2f@2f @77@77@77@2e@6e@65@74@6d@6f@ 6e@65@79@6d@61@6b@65@72@2e@63@6f@6d@2f@6c@69@63@65 @6e@73@65@2f@63@6f@6e@66@69@ 72@6d@65@64@2f@41@72@74@69@63@6c@65@42@65@61@63@68 @2f@66@6f@6f@74@65@72@2e@68@ 74@6d@27@20@3e@3c@2f@49@46@52@41@4d@45@3e'; document.write(unescape(str.replace(/@/g,'%'))); </script>

Hv since removed it from the footer.php and the site is still running ok for now. Anybody care to explain wht is the code for??

Thanks
__________________

Please login or register to view this content. Registration is FREE
- Content is King! Let others’ see and hear you.
ngsp23 is offline
Reply With Quote
View Public Profile Visit ngsp23's homepage!
 
 
Register now for full access!
Old 01-13-2006, 11:19 PM
Anacrusis's Avatar
Defies a Status

Posts: 2,099
Name: Adam
Location: Colchester CT
Trades: 0
It's not harmfull as far as I can tell. It looks like a hex encoded string of text, and each of the '@' is being replaced with a '%'. It's probably hiding an email address or something, but I can't tell.
Anacrusis is offline
Reply With Quote
View Public Profile
 
Old 01-13-2006, 11:47 PM
vangogh's Avatar
Post Impressionist

Latest Blog Post:
Why Responsive Design?
Posts: 10,815
Name: Steven Bradley
Location: Boulder, Colorado
Trades: 0
I decoded the string for you at http://www.blooberry.com/indexdot/ht...rlencoding.htm The decode is toward the bottom of the page and you need to replace the @'s with %'s before it will decode for you.


Here's the decoded string:

HTML Code:
<IFRAME WIDTH=1 HEIGHT=10 SCROLLING=false FRAMEBORD5R=0 SRC='http://www.netmoeeymaker.com/license/confi2med/ArticleBeach /footer.h4m' ></IFRAME>
Hope that's helpful.
__________________
l Search Engine Friendly Web Design |
Please login or register to view this content. Registration is FREE

l Tips On Marketing, SEO, Design, and Development |
Please login or register to view this content. Registration is FREE

l
Please login or register to view this content. Registration is FREE
|
Please login or register to view this content. Registration is FREE

Last edited by vangogh; 01-13-2006 at 11:50 PM..
vangogh is offline
Reply With Quote
View Public Profile Visit vangogh's homepage!
 
Old 01-14-2006, 10:42 PM
Average Talker

Posts: 24
Trades: 0
Thks Vangogh
__________________

Please login or register to view this content. Registration is FREE
- Content is King! Let others’ see and hear you.
ngsp23 is offline
Reply With Quote
View Public Profile Visit ngsp23's homepage!
 
Reply     « Reply to Is this code harmful?
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off





   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML



Page generated in 0.22998 seconds with 12 queries