hi every one ,
I need urgent help to decode the index.php file below
/ base64 code removed by mod.
stretched the page, plus it appears to be copyrighted anyway. /
Thanks a lot in advance ..
hi every one ,
I need urgent help to decode the index.php file below
/ base64 code removed by mod.
stretched the page, plus it appears to be copyrighted anyway. /
Thanks a lot in advance ..
Thats some ugly nested and obfuscated code
the first base64_decode renders:
$o="QAAAOzh3b3cnYGJzWG9iZmNidQAgLy48Jzg5Cg0KDQGjbmlka3IAAGNiJy9TQkpXS0ZTQldGU08ABScpJyAoYGZra2J1fikEACADXIQABPFhaGhzBPU=";
$lll=0;
$lllllllllll='base64_decode';
$ll=0;
$llllllllll='ord';
$llll=0;
$lllll=3;
$l=$lllllllllll($o);
$lllllll=0;
$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);
$lllllllllllll='strlen';
$lllllllll=16;
$llllllll="";
for(;$lllll<$lllllllllllll($l);)
{
if($lllllllll==0)
{
$llllll=($llllllllll($l[$lllll++])<<8);
$llllll+=$llllllllll($l[$lllll++]);
$lllllllll=16;
}
if($llllll&0x8000)
{
$lll=($llllllllll($l[$lllll++])<<4);
$lll+=($llllllllll($l[$lllll])>>4);
if($lll)
{
$ll=($llllllllll($l[$lllll++])&0x0f)+3;
for($llll=0;$llll<$ll;$llll++)
$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];
$lllllll+=$ll;
}
else
{
$ll=($llllllllll($l[$lllll++])<<8);
$ll+=$llllllllll($l[$lllll++])+16;
for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));
$lllll++;
$lllllll+=$ll;
}
}
else
$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);
$llllll<<=1;
$lllllllll--;
}
$llllllllllll='chr';
$lllll=0;
$lllllllll="?".$llllllllllll(62);
$llllllllll="";
for(;$lllll<$lllllll;)
{
$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);
}
$lllllllll.=$llllllllll.$llllllllllll(60)."?";
eval($lllllllll);
and i have no interest in going deeper than that as it's more than likely malicious
I knew that this code wont be fixed that easy .. now im in mess
I hope if some one could help in this or i`ll have to leave it for good
well its riddled with missing braces, function parameters and etc
also, please edit your first post and use PHP tags instead of CODE/QUOTE tags so the post wraps
Well... Out of sheer boredom I've cleaned this up and added missing braces followed by comments and put in MISSING where terms are missing in the for loops
Of course I'm purely guessing here:
<?php
$o="QAAAOzh3b3cnYGJzWG9iZmNidQAgLy48Jzg5Cg0KDQGjbmlka3IAAGNiJy9TQkpXS0ZTQldGU08ABScpJyAoYGZra2J1fikEACADXIQABPFhaGhzBPU=";
$lll=0;
$lllllllllll='base64_decode';
$ll=0;
$llllllllll='ord';
$llll=0;
$lllll=3;
$l=$lllllllllll($o);
$lllllll=0;
$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);
$lllllllllllll='strlen';
$lllllllll=16;
$llllllll="";
for(MISSING;$lllll<$lllllllllllll($l);MISSING)
{
if($lllllllll==0)
{
$llllll=($llllllllll($l[$lllll++])<<8);
$llllll+=$llllllllll($l[$lllll++]);
$lllllllll=16;
}
if($llllll&0x8000)
{
$lll=($llllllllll($l[$lllll++])<<4);
$lll+=($llllllllll($l[$lllll])>>4);
if($lll)
{
$ll=($llllllllll($l[$lllll++])&0x0f)+3;
for($llll=0;$llll<$ll;$llll++)
{//MISSING
$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];
$lllllll+=$ll;
}//MISSING
}
else
{
$ll=($llllllllll($l[$lllll++])<<8);
$ll+=$llllllllll($l[$lllll++])+16;
for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));
{//MISSING
$lllll++;
$lllllll+=$ll;
}//MISSING
}
}
else
{//MISSING
$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);
$llllll<<=1;
$lllllllll--;
}//MISSING
}
$llllllllllll='chr';
$lllll=0;
$lllllllll="?".$llllllllllll(62);
$llllllllll="";
for(MISSING;$lllll<$lllllll;MISSING)
{
$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);
}
$lllllllll.=$llllllllll.$llllllllllll(60)."?";
eval($lllllllll);
?>
Thanks for your help ,
i appreciate your time/effort .
as for the first post , i did already try to edit it , but i do not see the EDIT button , maybe because im new in the forum , not sure .. I 'll try to request help by moderator
more than likely the allowed time to edit has expired
no problem on the help...
is the code throwing errors? if so what are they? can you cite where you got the code?
there is no error given on site ..
This code is the content of index.php page ( for WorePress theme VIDEO FLICK v2.2 )
here is the download link for the theme ( click here )
and for DEMO ( Click Here )
i suppose this notice in the theme means nothing to you ?
/ WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. /
Thread locked.
As dagon pointed out, this file appears to be copyrighted, so helping you break that measure of protection isn't allowed on these forums.