Hi there,
I have read this thread : http://www.phpbuilder.com/board/showthread.php?t=10340358
In this thread they show how to "decode" an expresion I have been practicing and it works most of the times. In one template I have download I have this file:
<?php
$o="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";eval(base64_decode("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"));return;?>
Using the method described in the metioned thread its only show me a strange output:
<?php $lll=0;eval(base64_decode("JGxsbGxsbGxsbGxsPSdiYXNlNjRfZGVjb2RlJzs="));$ll=0;eval($lllllllllll("JGxsbGxsbGxsbGw9J29yZCc7"));$llll=0;$lllll=3;eval($lllllllllll("JGw9JGxsbGxsbGxsbGxsKCRvKTs="));$lllllll=0;$llllll=($llllllllll($l[1])<<8)+$llllllllll($l[2]);eval($lllllllllll("JGxsbGxsbGxsbGxsbGw9J3N0cmxlbic7"));$lllllllll=16;$llllllll="";for(;$lllll<$lllllllllllll($l);){if($lllllllll==0){$llllll=($llllllllll($l[$lllll++])<<8);$llllll+=$llllllllll($l[$lllll++]);$lllllllll=16;}if($llllll&0x8000){$lll=($llllllllll($l[$lllll++])<<4);$lll+=($llllllllll($l[$lllll])>>4);if($lll){$ll=($llllllllll($l[$lllll++])&0x0f)+3;for($llll=0;$llll<$ll;$llll++)$llllllll[$lllllll+$llll]=$llllllll[$lllllll-$lll+$llll];$lllllll+=$ll;}else{$ll=($llllllllll($l[$lllll++])<<8);$ll+=$llllllllll($l[$lllll++])+16;for($llll=0;$llll<$ll;$llllllll[$lllllll+$llll++]=$llllllllll($l[$lllll]));$lllll++;$lllllll+=$ll;}}else$llllllll[$lllllll++]=$llllllllll($l[$lllll++]);$llllll<<=1;$lllllllll--;}eval($lllllllllll("JGxsbGxsbGxsbGxsbD0nY2hyJzs="));$lllll=0;eval($lllllllllll("JGxsbGxsbGxsbD0iPyIuJGxsbGxsbGxsbGxsbCg2Mik7"));$llllllllll="";for(;$lllll<$lllllll;){$llllllllll.=$llllllllllll($llllllll[$lllll++]^0x07);}eval($lllllllllll("JGxsbGxsbGxsbC49JGxsbGxsbGxsbGwuJGxsbGxsbGxsbGxsbCg2MCkuIj8iOw=="));eval($lllllllll); ?>
Therefore, I can't read anything.
Can anybody please show me the output and how to decode this function?
Best Regards,
I have to say that I'm not an expert, but I can read and write some PHP code.
