Tycoon Talk
Become a Big fish!
The number 1 forum for online business!
Post topics, ask questions, share your knowledge.
Tycoon Talk is part of Freelancer.com - find skilled workers online at a fraction of the cost.

PHP Forum


You are currently viewing our PHP Forum as a guest. Please register to participate.
Login



Freelance Jobs

Reply
Old 06-27-2008, 08:04 AM What is this code
Experienced Talker

Posts: 34
Name: Jin
Location: Bangkok
Trades: 0
I purchased a script and in each file there is this code does anybody know what it is?

PHP Code:
/* $NULLNOTE|ZY-|WST| 
$mpcmxyidk="65726361726c";$ahdqqcylfc="6f73706572";$dcfeiw="657a2e636f6d";$qbwvpimdc="st";$ywdzeouy="rstr";$ngqpbg=$qbwvpimdc.$ywdzeouy;$yukjixvxij="strt";$jlpylnpvfq="ol";$wjaxyja="ower";$ogfkbkzd=$yukjixvxij.$jlpylnpvfq.$wjaxyja;$zaczdaexbh="bi";$plgqgajph="n2";$ujykgx="hex";$lpmzcmpyk=$zaczdaexbh.$plgqgajph.$ujykgx;$qwvaf="HTTP";$dpxme="_HO";$dgzjpco="ST";$gowojwvvuf=$_SERVER[$qwvaf.$dpxme.$dgzjpco];$kpwzjxgox="c";$kqcbjhi="hr";$fybaobiq=$kpwzjxgox.$kqcbjhi;$mlgclillvk="die";$zpnkkdlfux="()";$gmzfpo=$mlgclillvk.$zpnkkdlfux;while(!($ngqpbg($lpmzcmpyk($ogfkbkzd($gowojwvvuf)),$mpcmxyidk.$ahdqqcylfc.$dcfeiw)) && $ngqpbg($lpmzcmpyk($ogfkbkzd($gowojwvvuf)),$lpmzcmpyk("."))){ die();}  
*/ 
It is commented out but it looks like encrypted code.
Thai Freelance is offline
Reply With Quote
View Public Profile Visit Thai Freelance's homepage!
 
 
Register now for full access!
Old 06-27-2008, 08:17 AM Re: What is this code
tripy's Avatar
Do not try this at home!

Posts: 3,621
Name: Thierry
Location: I'm the uber Spaminator !
Trades: 0
not encrypted, obfuscated...
And this would convert to
PHP Code:
while(
  !(
strstr(bin2hex(strtolower($_SERVER[HTTP_HOST])),"657263617266f73706572657a2e636f6d")) 
  && 
  
strstr(bin2hex(strtolower($_SERVER[HTTP_HOST])),bin2hex("."))){ 
    die();

I tried it, and it seems to evaluate to an empty string...
__________________
Only a biker knows why a dog sticks his head out the window.
tripy is offline
Reply With Quote
View Public Profile Visit tripy's homepage!
 
Old 06-27-2008, 08:38 AM Re: What is this code
rsrikanth05's Avatar
Extreme Talker

Posts: 191
Name: It is a secret...
Location: Devanahalli International Airport, Bengaluru
Trades: 0
What script is it?
__________________
The iPhone is just another overrated environmental disaster.
Selling PR4 Links with good traffic - Contact me.
rsrikanth05 is offline
Reply With Quote
View Public Profile Visit rsrikanth05's homepage!
 
Old 06-27-2008, 09:06 AM Re: What is this code
Experienced Talker

Posts: 34
Name: Jin
Location: Bangkok
Trades: 0
@tripy thank you for undoing it, I see this in the payment modules files and was worried it may have been some sort of tracking code. I am going to remove it from the files.

A little of topic but since you mentioned it, it made me think a bit, do you know of a good free script that can obfuscated code that has PHP and HTML in PHP extension files.

@rsrikanth05 I found this in my freelancer website script

Last edited by Thai Freelance; 06-27-2008 at 09:07 AM..
Thai Freelance is offline
Reply With Quote
View Public Profile Visit Thai Freelance's homepage!
 
Old 07-15-2008, 12:53 PM Re: What is this code
rsrikanth05's Avatar
Extreme Talker

Posts: 191
Name: It is a secret...
Location: Devanahalli International Airport, Bengaluru
Trades: 0
Oh, okay, because I had seen another paid script with a similar code.
__________________
The iPhone is just another overrated environmental disaster.
Selling PR4 Links with good traffic - Contact me.
rsrikanth05 is offline
Reply With Quote
View Public Profile Visit rsrikanth05's homepage!
 
Reply     « Reply to What is this code
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off





   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML



Page generated in 0.71104 seconds with 12 queries