Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
August 21, 2019
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 203
Members: 1
Total: 204

Online Now:
01: Dno - Private Messages
PacketStorm News
Currently there is a problem with headlines from this site
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> I cant for the life of me decode this one ioncube file :(
Post new topic  Reply to topic View previous topic :: View next topic 
I cant for the life of me decode this one ioncube file :(
PostPosted: Mon Jan 16, 2012 7:28 am Reply with quote
HappyToHelp
Regular user
Regular user
 
Joined: Jan 14, 2012
Posts: 20
Location: Uk




I purchased a script ages ago and need to get rid of some annoying offer that the link points back too called "Powered By"

I am positive it's in the "offerheader.php" file but can not decode the damn thing.

It's really getting me down because I was due to start marketing this thing last week, so far it's taken hours of my life away.

Please can someone help me out because I just need this file implemented.




Offer Header

<?php //0046b
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);

?>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=


Last edited by HappyToHelp on Mon Jan 16, 2012 10:15 am; edited 1 time in total
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:36 am Reply with quote
DvStone
Regular user
Regular user
 
Joined: Jan 15, 2012
Posts: 6




This archive is with problems…

It accuses error in heading

It dispatches by post the original…

You used which version of the IonCube?
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 7:37 am Reply with quote
HappyToHelp
Regular user
Regular user
 
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
This archive is with problems…

It accuses error in heading

It dispatches by post the original…

You used which version of the IonCube?


Hi There

I'm not too sure in all honestly, it's just a script we purchased a while back, truth is I have no clue about any of what you just mentioned sorry.
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:42 am Reply with quote
DvStone
Regular user
Regular user
 
Joined: Jan 15, 2012
Posts: 6




I noticed that you used an old version of ioncube, you to share with me? I am needing…

If you to arrange the original obtain to revert the code for you…
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 7:47 am Reply with quote
HappyToHelp
Regular user
Regular user
 
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
I noticed that you used an old version of ioncube, you to share with me? I am needing…

If you to arrange the original obtain to revert the code for you…


We did not secure this script it was already like it, the developer secured it even know it should not of been, I mean we paid for this script under the pretense that it was ready to be used Sad

I'm happy to trade something with you, I have 36,000 PR7-PR1 backlinks, I am very advanced in SEO and web development, I have hundreds of fantastic stuff.

I really need help with this because it's just beyond annoying now, thing is I'm not 100% sure that this offerheader.php file is going to be the exact file that has the "Powered By" code which points back to the link I am just guessing.

Ideally it's going to be the correct one etc... if you would be kind enuogh to decode it for me I would really really appreciate it.
View user's profile Send private message Visit poster's website
PostPosted: Mon Jan 16, 2012 7:51 am Reply with quote
johnburn
Advanced user
Advanced user
 
Joined: Jan 14, 2011
Posts: 199
Location: Malaysia




Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>
</title>

<meta name="description" content="" />

<meta name="keywords" content="" />

<link rel="stylesheet" href="<?php echo $siteName; ?>css/style.css" type="text/css" />

<link href="<?php echo $siteName; ?>css/thickbox.css" rel="stylesheet" type="text/css" />
<script language="javascript">

var siteName = "<?php echo $siteName; ?>";

</script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery-1.3.2.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery.validate.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/ajax.js"></script>
<script language="javascript" src="<?php echo $siteName; ?>scripts/thickbox.js"></script>

</head>

<body>

<div id="wrapper">
View user's profile Send private message
PostPosted: Mon Jan 16, 2012 7:55 am Reply with quote
DvStone
Regular user
Regular user
 
Joined: Jan 15, 2012
Posts: 6




Rat…

It obtained something with mine?
View user's profile Send private message Send e-mail
PostPosted: Mon Jan 16, 2012 8:16 am Reply with quote
HappyToHelp
Regular user
Regular user
 
Joined: Jan 14, 2012
Posts: 20
Location: Uk




DvStone wrote:
Rat…

It obtained something with mine?


Thanks so much John, I just replied in the other thread. DV what do you mean RAT? I don't follow you...
View user's profile Send private message Visit poster's website
I cant for the life of me decode this one ioncube file :(
  www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Post new topic  Reply to topic  




Powered by phpBB © 2001-2008 phpBB Group






All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2013 Janek Vind "waraxe"
Page Generation: 0.067 Seconds