Waraxe IT Security Portal
Login or Register
July 27, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 230
Members: 0
Total: 230
Full disclosure
CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus
[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability
[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability
CVE-2024-33326
CVE-2024-33327
CVE-2024-33328
CVE-2024-33329
CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100
SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice
SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products
Novel DoS Vulnerability Affecting WebRTC Media Servers
APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8
40 vulnerabilities in Toshiba Multi-Function Printers
17 vulnerabilities in Sharp Multi-Function Printers
SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PHP script decode requests -> i saw this same type of php decoded here/need decoded
Post new topicReply to topic View previous topic :: View next topic
i saw this same type of php decoded here/need decoded
PostPosted: Mon Aug 13, 2012 2:42 am Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




sweet forum and like title said i saw other code searching google similar to this and you guys got it, so
thanks

Code:
${${"\x47\x4c\x4fB\x41\x4c\x53"}["c\x65\x66a\x73\x6d\x6e\x6e"]})${$twlotiuupsx}.=${${"\x47\x4c\x4f\x42AL\x53"}["i\x69\x63\x79i\x6b\x61\x6b"]}."=".urlencode(${${"\x47L\x4fB\x41L\x53"}["\x63\x69fc\x62t\x75\x62e"]})."\x26";${${"\x47LO\x42\x41\x4cS"}["\x6d\x70\x6aaj\x74ee\x79"]}=rtrim(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x63q\x79\x76\x65\x73\x74\x76kx"]},"&");${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6d\x6d\x69hb\x79p\x68\x75\x66"]}=post_page(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6b\x75\x75\x7a\x78l\x73\x65\x61\x6d"]}."/car\x74/\x61dd\x2f".$_GET["\x61s\x69n"],${${"\x47\x4c\x4f\x42A\x4cS"}["m\x70\x6aaj\x74\x65\x65\x79"]});}elseif("re\x6d\x6f\x76\x65"===$_GET["a\x63\x74\x69\x6f\x6e"]){${"\x47\x4c\x4f\x42A\x4cS"}["\x6bw\x6d\x6f\x74o\x70\x74w\x64\x6d\x68"]="\x75\x72l";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6b\x77mo\x74\x6f\x70\x74w\x64m\x68"]}=${${"\x47L\x4fB\x41L\x53"}["k\x75\x75zx\x6c\x73e\x61\x6d"]}."/car\x74\x2f\x72emov\x65/".$_GET["a\x73\x69n"]."\x3f\x73es\x73\x69o\x6eI\x64\x3d".urlencode($_GET["\x73\x65\x73\x73i\x6f\x6eI\x64"])."&\x63artI\x74e\x6d\x49\x64=".urlencode($_GET["\x63\x61\x72\x74\x49\x74\x65\x6dId"]);get_page(${${"GL\x4f\x42\x41LS"}["d\x78\x7a\x7az\x68b\x68"]});header("L\x6f\x63ation\x3a ".${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75\x73\x6e\x78\x62\x76\x76\x77\x78\x6f\x78"]}."c\x61rt");exit;}elseif("\x6d\x6fdi\x66\x79"===$_GET["a\x63\x74\x69on"]){$avqbqnb="r\x65\x71";${"G\x4c\x4f\x42A\x4c\x53"}["rd\x64\x78s\x63\x6a\x78"]="v\x61l\x75\x65";${"\x47\x4cO\x42ALS"}["\x75js\x6d\x71ij"]="r\x65q";${$avqbqnb}="";foreach($_GET as${${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x69c\x79\x69kak"]}=>${${"G\x4c\x4f\x42AL\x53"}["\x72\x64\x64\x78\x73\x63j\x78"]}){if("\x74\x79\x70e"!==${${"\x47\x4c\x4fBA\x4c\x53"}["\x69\x69cy\x69\x6ba\x6b"]}){${"\x47\x4c\x4f\x42AL\x53"}["\x71\x74\x6f\x6e\x67\x6berq\x75s"]="re\x71";${"GL\x4f\x42\x41L\x53"}["d\x6fyf\x72\x62\x65"]="k\x65y";${"\x47L\x4f\x42A\x4c\x53"}["\x69z\x77\x6d\x6a\x78\x70\x6b\x76mk"]="\x76a\x6cu\x65";$hhjtgomg="\x6b\x65\x79";${${"G\x4cOB\x41\x4c\x53"}["\x69icy\x69ka\x6b"]}=preg_replace("\x2fI\x74\x65m\x5f\x28\\\x64)+\x5f\x28Q\x75\x61nt\x69\x74\x79|\x43ar\x74\x49t\x65\x6d\x49d)/\x69","\x49te\x6d.\x241.\x242",${$hhjtgomg});${${"\x47\x4c\x4f\x42A\x4cS"}["q\x74\x6f\x6eg\x6b\x65r\x71u\x73"]}.=${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x6f\x79\x66r\x62e"]}."\x3d".urlencode(${${"\x47LO\x42\x41L\x53"}["\x69\x7awm\x6ax\x70k\x76\x6dk"]})."\x26";}}$qkvtaekvzb="h\x74\x6dl";${${"\x47\x4c\x4fB\x41L\x53"}["\x6dp\x6aa\x6ate\x65\x79"]}=rtrim(${${"GL\x4f\x42\x41L\x53"}["mpja\x6atee\x79"]},"&");${$qkvtaekvzb}=get_page(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6bu\x75z\x78\x6cs\x65am"]}."/\x63\x61\x72\x74/m\x6fd\x69f\x79\x3f".${${"\x47\x4cO\x42\x41\x4cS"}["\x75\x6asmq\x69\x6a"]});}}else{$oiuggtiorpl="\x61\x73\x74\x6f\x72e\x5fur\x6c";${"G\x4c\x4fB\x41L\x53"}["d\x78\x67y\x78\x6b\x6e"]="\x61\x73\x74\x6f\x72\x65\x5f\x75\x72\x6c";$ttjcwgebmlb="a\x73\x74\x6f\x72e\x5f\x75rl";${"G\x4c\x4fB\x41\x4c\x53"}["cp\x77\x79\x62z\x70\x67\x79t"]="ur\x6c";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6d\x78\x75qs\x6bw"]="\x61\x73t\x6f\x72\x65_u\x72l";$gcnwnthn="\x75rl";${"G\x4c\x4fB\x41L\x53"}["\x76c\x68\x76\x6cp"]="\x64\x62";$kuhujwcsigw="\x6c\x6f\x63\x61t\x69\x6f\x6e";$tiuuikj="\x64\x62";if("d\x65\x74a\x69\x6c"===$_GET["\x74y\x70\x65"])${${"\x47\x4cO\x42\x41\x4c\x53"}["\x63\x70\x77\x79\x62\x7ap\x67\x79t"]}=${$oiuggtiorpl}."/\x64\x65\x74ail/".$_GET["\x61\x73in"];elseif("i\x6da\x67\x65s"===$_GET["\x74ype"])${${"\x47L\x4f\x42AL\x53"}["\x64\x78\x7a\x7a\x7a\x68b\x68"]}=${${"G\x4cOBA\x4c\x53"}["k\x75uzx\x6c\x73e\x61\x6d"]}."/i\x6da\x67\x65s/".$_GET["\x61\x73\x69\x6e"];elseif("n\x6fde"===$_GET["\x74yp\x65"])${${"\x47LO\x42\x41L\x53"}["dx\x7az\x7a\x68b\x68"]}=${$ttjcwgebmlb}."\x3f%\x35\x46en\x63o\x64\x69ng\x3d\x55T\x468\x26\x6eo\x64e\x3d".urlencode($_GET["no\x64e"]);elseif("pa\x67e"===$_GET["\x74\x79\x70\x65"])${${"\x47\x4c\x4f\x42ALS"}["d\x78z\x7a\x7a\x68\x62h"]}=${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x64\x78g\x79\x78kn"]}."?\x6e\x6fd\x65\x3d".urlencode($_GET["no\x64\x65"])."\x26\x70\x61\x67e=".urlencode($_GET["p\x61\x67e"]);elseif("a\x62\x6f\x75t"===$_GET["type"])${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64\x78z\x7azhbh"]}=${${"\x47\x4c\x4f\x42\x41LS"}["\x6d\x78\x75\x71\x73\x6bw"]}."\x2fab\x6f\x75\x74";elseif("\x6cis\x74\x6da\x6ei\x61"===$_GET["t\x79\x70\x65"])${$gcnwnthn}=${${"\x47\x4cO\x42A\x4c\x53"}["\x6bu\x75\x7a\x78\x6cs\x65\x61\x6d"]}."/l\x69stm\x61\x6e\x69a/".$_GET["i\x64"];elseif("\x73earc\x68"===$_GET["ty\x70e"])${${"GL\x4f\x42\x41\x4cS"}["d\x78z\x7a\x7ah\x62h"]}=${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6b\x75\x75\x7a\x78\x6cs\x65a\x6d"]}."/s\x65\x61\x72c\x68?no\x64\x65=".urlencode($_GET["no\x64\x65"])."\x26ke\x79w\x6f\x72ds=".urlencode($_GET["keywo\x72\x64s"]).(TRUE===isset($_GET["\x70\x72\x65\x76\x69\x65\x77"])?"&prev\x69\x65w\x3d".urlencode($_GET["\x70\x72\x65v\x69\x65\x77"]):"").(TRUE===isset($_GET["p\x61\x67e"])?"&p\x61\x67e\x3d".$_GET["\x70\x61\x67e"]:"");${$kuhujwcsigw}=$_GET["\x74y\x70\x65"];${${"\x47\x4c\x4f\x42AL\x53"}["m\x6d\x69\x68by\x70\x68\x75f"]}=get_page(${${"G\x4c\x4f\x42\x41L\x53"}["\x64x\x7a\x7azh\x62\x68"]});if("\x61\x62o\x75\x74"===${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x72\x78\x76kurc"]})${${"G\x4cO\x42\x41\x4c\x53"}["mm\x69h\x62\x79\x70\x68\x75\x66"]}=str_replace("\x47\x6fo\x67\x6c\x65's o\x77n\x20pr\x69va\x63\x79 p\x6f\x6c\x69ci\x65s\x2e"."\n"."<\x68\x33\x3e\x41m\x61\x7a\x6f\x6e \x41\x73soc\x69\x61\x74\x65<\x2fh\x33\x3e"."\n"."\x3c\x70\x3e\x41mazon\x20\x61\x6e\x64 the\x20\x41m\x61\x7ao\x6e lo\x67\x6f\x20\x61\x72e \x74\x72ad\x65\x6d\x61\x72\x6bs\x20o\x66\x20\x41\x6da\x7a\x6f\x6e\x2ecom, \x49n\x63\x2e \x6f\x72 it\x73 \x61\x66fi\x6c\x69\x61\x74es.\x3c/\x70>",${${"\x47\x4cO\x42\x41L\x53"}["\x6d\x6d\x69\x68b\x79\x70\x68u\x66"]});}}else{${${"\x47LO\x42A\x4c\x53"}["\x74\x72\x78v\x6b\x75\x72c"]}="h\x6fm\x65";${${"\x47L\x4fBAL\x53"}["\x6dmihb\x79\x70\x68uf"]}=get_page(${${"\x47\x4cO\x42A\x4cS"}["\x6b\x75\x75\x7a\x78\x6c\x73\x65\x61\x6d"]});}$feywrnysebm="l\x6f\x63\x61\x74i\x6fn";${"\x47\x4cO\x42\x41\x4cS"}["\x61\x6ff\x72\x6dt\x75\x6b\x72\x61"]="l\x69\x6ek\x5f\x75\x72\x6c";${"\x47\x4c\x4fB\x41\x4c\x53"}["v\x73\x68o\x67\x6f\x72o\x70\x72"]="\x68\x74\x6d\x6c";${"G\x4c\x4f\x42\x41LS"}["\x79\x78\x71\x66\x72hms"]="\x68\x74\x6dl";$kbfnvioejun="d\x65sc\x72i\x70tion";${"GL\x4f\x42A\x4c\x53"}["\x6al\x69\x74\x72\x76r\x6b\x73\x6e\x69\x70"]="\x64\x65\x73c\x72i\x70t\x69\x6f\x6e";${"\x47\x4c\x4f\x42A\x4cS"}["\x68\x6f\x73\x72\x73\x64\x70\x7a\x67\x63\x63t"]="\x68\x74\x6dl";$txsqbkuc="htm\x6c";${"\x47LO\x42A\x4c\x53"}["\x7aq\x6e\x6e\x66d\x78\x6ex\x72"]="feed\x5f\x68a\x73h";$plhadtmclcj="\x68\x74\x6dl";${${"GLOBAL\x53"}["\x68\x6f\x73rs\x64\x70\x7ag\x63\x63t"]}=trim(${${"\x47LOB\x41\x4cS"}["\x6d\x6d\x69h\x62\x79\x70\x68\x75f"]});if(""===${${"\x47\x4c\x4f\x42A\x4c\x53"}["f\x65st\x6fu\x63d\x73"]}){header("\x4coc\x61ti\x6fn\x3a\x20".${${"\x47\x4c\x4f\x42ALS"}["\x75\x73\x6exbv\x76w\x78\x6f\x78"]});exit;}if("h\x6fme"!==${$feywrnysebm}){$lazjcjmu="h\x74m\x6c";$qceonwk="\x74\x69\x74\x6ce";${"G\x4c\x4fB\x41\x4c\x53"}["\x67p\x6d\x71\x6c\x6a\x69"]="t\x69\x74l\x65";${"G\x4c\x4f\x42\x41\x4c\x53"}["r\x77\x6dtv\x76"]="\x74i\x74l\x65";$dlvurt="\x64b";$wgzjtvgfloub="t\x69\x74\x6ce";preg_match("/\x3ctit\x6ce>\x28\x2e*\x29\x3c\x5c\x2ft\x69tle\x3e\x5c\x73\x2a\x5c\x6e\x2a\x5cs\x2a/i",${${"\x47\x4cOBAL\x53"}["\x6dmi\x68b\x79\x70\x68u\x66"]},${${"G\x4c\x4fB\x41\x4cS"}["\x75\x6cc\x6c\x69\x77\x77"]});if(TRUE===isset(${${"\x47L\x4f\x42\x41L\x53"}["\x64\x71\x6f\x64\x62\x63w"]}[1]))${${"\x47\x4c\x4f\x42AL\x53"}["e\x67\x77\x70\x7a\x67\x76y\x66j\x78"]}=trim(${${"\x47\x4c\x4fBA\x4c\x53"}["\x64\x71\x6f\x64\x62\x63\x77"]}[1]);else${$vsszjl}="";}if("i\x6da\x67e\x73"===${${"G\x4c\x4f\x42AL\x53"}["\x74r\x78v\x6b\x75\x72\x63"]})${$wgzjtvgfloub}.="\x20\x49\x6dage\x73 - ".${$dlvurt}["\x73to\x72e\x5fnam\x65"];else${$qceonwk}=""===${${"\x47\x4c\x4f\x42A\x4c\x53"}["rw\x6d\x74\x76v"]}?${${"\x47\x4c\x4f\x42AL\x53"}["\x66fr\x76u\x76\x71"]}["s\x74o\x72\x65_n\x61\x6d\x65"]:substr(${${"\x47\x4cOB\x41LS"}["\x65\x67\x77\x70\x7a\x67\x76y\x66\x6a\x78"]},strpos(${${"\x47\x4c\x4f\x42ALS"}["\x67p\x6d\x71\x6c\x6ai"]}," \x2d ")+3)."\x20- ".${${"\x47\x4c\x4f\x42A\x4cS"}["\x66\x66r\x76\x75\x76\x71"]}["st\x6f\x72e_\x6e\x61\x6d\x65"];}else{${"\x47\x4c\x4f\x42\x41L\x53"}["\x75\x6b\x71\x64\x74xx\x79i\x78t"]="tit\x6c\x65";${"\x47\x4c\x4f\x42\x41L\x53"}["\x70\x62\x63\x71\x78\x71\x78\x6a\x70\x66i"]="db";$wuyflvvcxz="\x64\x62";$cxhirwfx="\x64e\x73c\x72i\x70t\x69o\x6e";${${"G\x4c\x4f\x42A\x4cS"}["\x75k\x71d\x74x\x78\x79\x69\x78\x74"]}=${$wuyflvvcxz}["\x6d\x65t\x61\x5f\x74\x69\x74\x6c\x65"];${$cxhirwfx}=${${"\x47\x4cOB\x41\x4cS"}["\x70bc\x71\x78\x71\x78j\x70\x66i"]}["me\x74a_\x64escri\x70t\x69\x6f\x6e"];}$ecpswhvrc="h\x74m\x6c";if("\x64eta\x69\x6c"===${${"G\x4c\x4fBAL\x53"}["\x74r\x78\x76ku\x72c"]}){$pexmdvu="m\x61\x74\x63h\x65s";$yrglmygx="\x6d\x61\x74c\x68\x65\x73";preg_match("/\x5b\x5c\x73\x5d\x2aEdit\x6fria\x6c R\x65vie\x77\x73<\x5c\x2f\x68\x32\x3e[\x5c\x73\x5d\x2a[\\n]\x2a[\\s\x5d\x2a\x3c\x64iv i\x64\x3d\"e\x64\x69\x74\x6f\x72i\x61l\x52\x65vie\x77s\"\x3e\x5b\\s\x5d\x2a[\x5cn\x5d\x2a\x5b\\s]*<\x70>\x5b\\s\x5d*[\\\x6e]*[\\\x73]*\x3c\x73pan\x20\x63\x6ca\x73s=\x22\x72e\x76ie\x77t\x69\x74le\">[\\\x73]*\x5b\\n\x5d*[\x5cs\x5d*\x5b^\x3c\x5d+\x5b\x5c\x73]\x2a\x5b\\\x6e]\x2a[\\s]\x2a<\\/\x73pan\x3e\x5b\\\x73\x5d*[\x5cn\x5d*\x5b\x5c\x73]*\x3c\x62\x72>\x5b\x5cs\x5d*\x5b\\n\x5d\x2a\x5b\\s]\x2a\x28\x2e\x2a\x29/\x73i",${${"\x47\x4cOB\x41\x4cS"}["\x6d\x6di\x68by\x70\x68\x75f"]},${$pexmdvu});if(FALSE===isset(${${"\x47\x4cOBAL\x53"}["d\x71\x6fd\x62c\x77"]}[1])){preg_match("\x2f\x5b\x5cs\x5d*F\x65\x61\x74u\x72\x65s<\x5c/\x68\x33>\x5b\x5cs]\x2a\x5b\x5c\x6e\x5d\x2a\x5b\x5cs\x5d*\x3cul>[\x5c\x73\x5d\x2a\x5b\x5cn\x5d\x2a\x5b\x5c\x73]*(\x28(\x3f\x21<\\/u\x6c\x3e\x29.)*\x29/\x73\x69",${${"GL\x4f\x42A\x4c\x53"}["\x6d\x6d\x69\x68\x62\x79\x70\x68\x75\x66"]},${$urhuymff});if(FALSE===isset(${${"\x47L\x4fB\x41\x4cS"}["\x75\x6b\x63\x64t\x70\x68\x72j\x6c\x6a"]}[1]))preg_match("\x2f\x5b\x5cs]*\x3ch2\x3e\x50ro\x64uct \x44etai\x6cs\x3c\\/\x68\x32\x3e\x5b\x5c\x73\x5d*[\\n\x5d*[\x5c\x73\x5d*\x3cul\x3e[\x5c\x73\x5d*\x5b\x5c\x6e]\x2a[\\\x73]\x2a\x28\x28(?!<\x5c/ul\x3e)\x2e\x29*\x29/\x73i",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["w\x68\x74\x64\x79\x6a\x79\x6c\x66\x66\x75m"]},${${"G\x4c\x4f\x42\x41L\x53"}["dqo\x64\x62\x63w"]});}}if(TRUE===isset(${$yrglmygx}[1])){$ppyeuftmphp="\x6da\x74\x63\x68\x65\x73";$vsqnmedrob="\x6d\x61\x74c\x68\x65\x73";$ejzxwrj="\x6d\x61\x74\x63\x68\x65\x73";$jstgboywvgt="\x64e\x73\x63\x72\x69\x70t\x69\x6f\x6e";$siuxqetplbp="ma\x74c\x68es";${"\x47\x4c\x4f\x42A\x4cS"}["\x78o\x62a\x78iy\x6f\x75\x6f"]="\x6d\x61t\x63\x68\x65\x73";$kliqqups="\x6dat\x63\x68\x65s";${$kliqqups}[1]=str_replace("<","\x20\x3c",${$ppyeuftmphp}[1]);${$siuxqetplbp}[1]=str_replace("\x3e",">\x20",${${"\x47\x4cO\x42\x41LS"}["\x64\x71od\x62\x63w"]}[1]);${${"\x47L\x4fB\x41\x4c\x53"}["\x78\x6fb\x61\x78i\x79\x6f\x75o"]}[1]=preg_replace("/(\x2e\x2a)\x3c\x5c/\x74itle\x3e/\x69","<\x74i\x74l\x65\x3e".htmlspecialchars(${${"\x47\x4cO\x42A\x4c\x53"}["\x65\x67\x77pz\x67\x76\x79f\x6a\x78"]},ENT_NOQUOTES,"\x55\x54\x46-\x38",FALSE)."\x3c\x2f\x74i\x74\x6c\x65\x3e",${${"\x47LO\x42\x41\x4cS"}["mm\x69h\x62\x79\x70\x68\x75f"]});${${"\x47\x4cO\x42A\x4cS"}["\x64\x7ao\x63\x69x\x69\x72i"]}=str_replace("\x3c\x74i\x74l\x65\x3e","\x3c\x6de\x74a\x20\x68t\x74p\x2d\x65\x71\x75\x69\x76\x3d\"\x43\x61che-\x43\x6f\x6e\x74\x72ol\"\x20c\x6f\x6et\x65\x6e\x74\x3d\x22\x6e\x6f-\x63\x61\x63\x68\x65\x22\x20\x2f>"."\n".""."\n"."\x3c\x6d\x65\x74\x61 \x68\x74\x74\x70-eq\x75i\x76=\"\x45\x78pi\x72\x65\x73\x22\x20co\x6et\x65n\x74\x3d\"-1\" />"."\n"."\x3c\x74i\x74le>",${${"\x47L\x4fBAL\x53"}["m\x6d\x69\x68\x62\x79ph\x75\x66"]});${"\x47LOBALS"}["\x77\x62\x62\x68\x66\x66\x63"]="\x64b";if(TRUE===isset(${${"GL\x4f\x42\x41\x4cS"}["\x6a\x6c\x69t\x72vr\x6b\x73\x6ei\x70"]}))${${"\x47L\x4f\x42AL\x53"}["mm\x69\x68\x62yp\x68\x75f"]}=str_replace("<\x74it\x6ce>","\x3c\x6de\x74a na\x6d\x65=\"d\x65s\x63\x72\x69\x70\x74\x69\x6fn\" cont\x65nt\x3d\"".htmlspecialchars(${$kbfnvioejun},ENT_COMPAT,"\x55\x54\x46-8",FALSE)."\" \x2f\x3e"."\n"."\x3ctit\x6c\x65\x3e",${$kdwweojzlxf});${$dshwqirp}=str_replace("\x3c\x74\x69t\x6c\x65>","<\x6d\x65t\x61\x20\x6e\x61m\x65=\"k\x65\x79\x77\x6f\x72\x64\x73\x22 c\x6fn\x74e\x6e\x74\x3d\"".htmlspecialchars(${$ojszqrjqlfc}["\x6de\x74\x61_k\x65y\x77\x6frds"],ENT_COMPAT,"\x55\x54\x46-8",FALSE)."\x22 \x2f\x3e"."\n"."\x3cti\x74\x6c\x65>",${$iksrlibqvk});${"G\x4c\x4fBA\x4c\x53"}["\x73\x6c\x69\x71jp\x6e\x6eoy\x66"]="\x64\x62";${$ecpswhvrc}=str_replace(" t\x61\x72\x67\x65\x74=\"\x5ft\x6fp\x22\x20\x72e\x6c=\"\x6e\x6f\x66o\x6c\x6cow\"","",${${"GL\x4fBA\x4c\x53"}["\x79xq\x66\x72hm\x73"]});${${"\x47\x4cOB\x41LS"}["\x6dm\x69\x68\x62y\x70\x68\x75\x66"]}=str_replace("\"/".${${"\x47\x4c\x4fBA\x4c\x53"}["ff\x72vu\x76\x71"]}["\x61\x73\x74\x6f\x72e_\x69d"]."\x2f\x63\x61rt\x22","\x22".${${"G\x4c\x4f\x42\x41\x4cS"}["\x75\x73\x6ex\x62\x76\x76\x77x\x6f\x78"]}."\x63art\x22",${${"\x47\x4cO\x42\x41L\x53"}["m\x6d\x69\x68\x62\x79ph\x75f"]});${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x6d\x69hby\x70hu\x66"]}=str_replace("hre\x66\x3d\"\x2f".${${"GL\x4f\x42\x41\x4c\x53"}["\x73\x6c\x69qj\x70nn\x6fy\x66"]}["\x61sto\x72\x65\x5f\x69d"]."/\x63art\x22","\x68\x72\x65f=\x22".${${"GL\x4f\x42\x41\x4c\x53"}["\x75\x73nx\x62\x76vwx\x6f\x78"]}."ca\x72\x74\x22",${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x6di\x68\x62\x79\x70\x68u\x66"]});$cudaqptdkn="\x68t\x6dl";${"\x47LOB\x41\x4cS"}["\x65\x73h\x74\x6eq\x61\x79"]="\x64\x62";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x6d\x69\x68\x62\x79\x70h\x75f"]}=str_replace("\x68r\x65\x66=\x22/".${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x66f\x72\x76\x75\x76\x71"]}["as\x74\x6fre_i\x64"]."/a\x62\x6fu\x74\"","h\x72e\x66=\x22".${${"\x47L\x4f\x42\x41LS"}["\x75\x73n\x78b\x76v\x77\x78\x6f\x78"]}."abo\x75\x74\x22",${$clcdgxiflkfs});${$cudaqptdkn}=str_replace("hr\x65\x66=\x22\x2f".${${"\x47\x4cO\x42\x41LS"}["f\x66rvu\x76q"]}["\x61s\x74or\x65_\x69d"]."\x2fdet\x61i\x6c\x2f","h\x72\x65f=\"".${${"\x47LOB\x41LS"}["gx\x6d\x78\x62\x63\x68o\x75\x6b"]}."\x64e\x74\x61\x69l/",${${"\x47LOBAL\x53"}["\x6dm\x69\x68\x62\x79\x70\x68\x75f"]});${$zatkxrkgvpd}=str_replace("\x68\x72e\x66\x3d\"\x2f".${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77\x62\x62\x68f\x66\x63"]}["\x61\x73tore\x5f\x69\x64"]."\x2fima\x67e\x73\x2f","\x68ref=\"".${${"\x47\x4cO\x42A\x4c\x53"}["\x75\x73\x6e\x78bv\x76\x77x\x6f\x78"]}."ima\x67es\x2f",${${"G\x4c\x4fB\x41\x4c\x53"}["\x6dmih\x62y\x70\x68u\x66"]});${"G\x4c\x4f\x42A\x4c\x53"}["\x67\x7a\x68k\x63\x75\x6a"]="\x64\x62";${${"\x47\x4cO\x42\x41\x4cS"}["\x6d\x6d\x69\x68\x62y\x70\x68\x75\x66"]}=str_replace("h\x72e\x66=\x22\x2f".${${"\x47\x4cO\x42AL\x53"}["\x66f\x72\x76\x75v\x71"]}["a\x73t\x6f\x72\x65\x5f\x69\x64"]."\x2flis\x74ma\x6ei\x61/","\x68\x72e\x66=\"".${${"G\x4c\x4fB\x41L\x53"}["\x75s\x6e\x78\x62\x76\x76wxox"]}."l\x69\x73tman\x69\x61/",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x6dihb\x79\x70\x68\x75\x66"]});${${"G\x4cO\x42\x41LS"}["\x6d\x6d\x69\x68b\x79\x70\x68\x75\x66"]}=str_replace("h\x72\x65\x66=\"\x2f".${${"GLO\x42\x41\x4c\x53"}["f\x66\x72\x76uv\x71"]}["ast\x6fr\x65\x5fi\x64"]."/c\x61r\x74\x2fr\x65\x6d\x6fv\x65\x2f","h\x72e\x66\x3d\"".${$ezkoehkkp}."\x63\x61rt/\x72emove\x2f",${${"G\x4c\x4fB\x41\x4c\x53"}["\x6d\x6d\x69hb\x79p\x68uf"]});${${"\x47\x4cO\x42ALS"}["m\x6d\x69\x68\x62\x79\x70\x68uf"]}=str_replace("h\x72e\x66\x3d\x22\x2f".${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x65\x62\x67\x63\x61\x66s"]}["\x61s\x74\x6fr\x65\x5fi\x64"]."\x2fs\x65\x61r\x63\x68\x3f","\x68\x72\x65f\x3d\"".${${"G\x4c\x4fB\x41\x4c\x53"}["\x75s\x6e\x78b\x76vw\x78\x6f\x78"]}."\x73e\x61\x72c\x68\x3f",${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6dmi\x68\x62\x79\x70h\x75\x66"]});${${"GLOB\x41L\x53"}["mmi\x68\x62yp\x68\x75f"]}=str_replace("\x61ct\x69o\x6e\x3d\"/".${${"\x47\x4c\x4fB\x41L\x53"}["\x66\x66\x72\x76\x75\x76\x71"]}["asto\x72e\x5fid"]."/searc\x68\x22","\x61\x63ti\x6f\x6e\x3d\"".${${"\x47L\x4fB\x41\x4c\x53"}["\x75s\x6e\x78\x62v\x76wxox"]}."se\x61r\x63\x68\x22",${${"G\x4c\x4f\x42A\x4c\x53"}["\x6d\x6d\x69\x68\x62\x79\x70\x68\x75\x66"]});${${"\x47\x4c\x4fB\x41\x4c\x53"}["m\x6d\x69hb\x79\x70\x68u\x66"]}=str_replace("\x61\x63t\x69on\x3d\x22/".${${"GLO\x42ALS"}["\x66frv\x75vq"]}["\x61\x73t\x6f\x72e\x5fid"]."/\x63\x61r\x74\x2f\x61d\x64/","a\x63\x74i\x6fn=\"".${$khgchrtqw}."cart/add/",${${"\x47L\x4f\x42\x41L\x53"}["\x71\x6dp\x61b\x73\x66tli"]});${${"\x47L\x4fBA\x4cS"}["i\x6d\x7ab\x61\x70\x76\x77x\x62i"]}=str_replace("\x61\x63\x74\x69\x6f\x6e=\"\x2f".${$glxzatycmzj}["as\x74\x6f\x72\x65_i\x64"]."\x2f\x63\x61\x72\x74\x2fc\x68\x65c\x6bo\x75\x74\"","\x61c\x74ion=\"".${${"\x47\x4c\x4fBA\x4cS"}["\x6b\x75u\x7a\x78\x6cs\x65\x61m"]}."\x2f\x63a\x72\x74\x2f\x63he\x63\x6b\x6f\x75\x74\x22",${$hdqpskhf});${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x6d\x69h\x62\x79p\x68\x75f"]}=str_replace("\x61c\x74io\x6e=\"\x2f".${${"\x47\x4c\x4f\x42A\x4cS"}["\x66\x66\x72\x76u\x76q"]}["\x61st\x6f\x72e_id"]."\x2f\x63\x61\x72\x74\x2f\x6d\x6fd\x69fy\"","\x61\x63tio\x6e\x3d\"".${${"\x47L\x4fB\x41L\x53"}["u\x73nx\x62vv\x77\x78\x6f\x78"]}."\x63\x61\x72\x74/modify\"",${${"\x47\x4c\x4f\x42ALS"}["\x6d\x6d\x69hb\x79\x70\x68uf"]});${${"\x47L\x4f\x42A\x4c\x53"}["mmi\x68\x62\x79phu\x66"]}=preg_replace("\x2fhref\x3d\x22\x5c\x2f".${${"G\x4c\x4f\x42\x41L\x53"}["e\x73\x68\x74\x6eqa\x79"]}["\x61\x73t\x6fr\x65\x5fid"]."[\\?]?\"\x2fi","\x68\x72\x65\x66=\x22".${$vlrcmogpjsub}."\"",${$txsqbkuc});${$plhadtmclcj}=preg_replace("\x2f\x68r\x65\x66=\"\x5c/".${${"G\x4c\x4fBALS"}["\x66\x66\x72\x76\x75\x76\x71"]}["a\x73\x74o\x72\x65\x5fid"]."\x5c\x3f\x28(\\%\x35F\x7c_)\x3f\x65n\x63o\x64in\x67=U\x54F8)\x3f\x5c&\x28\x61\x6d\x70;)?\x6e\x6fd\x65\x3d([\x30-9\x5d\x2b)/i","h\x72ef\x3d\x22".${${"G\x4c\x4fBA\x4c\x53"}["us\x6e\x78bvv\x77\x78o\x78"]}."n\x6fd\x65\x2f\x24\x34",${${"G\x4c\x4f\x42A\x4c\x53"}["\x71\x72\x78\x64x\x6a"]});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6d\x6d\x69\x68\x62yp\x68\x75\x66"]}=preg_replace("/h\x72e\x66\x3d\"\x5c\x2f".${$wievgcz}["as\x74\x6fr\x65\x5fid"]."\x5c?\x28\x28\x5c\x255F\x7c_\x29\x3fencodi\x6e\x67=\x55T\x46\x38\\&\x28\x61m\x70;)\x3f\x29?\x6e\x6fde\x3d\x28[0-9\x5d+\x29\x5c&(a\x6d\x70\x3b\x29\x3f\x70a\x67\x65=\x28\x5b0-\x39\x5d+\x29\x2fi","hr\x65f\x3d\"".${${"\x47\x4cO\x42ALS"}["\x75\x73\x6e\x78b\x76\x76w\x78\x6f\x78"]}."\x6e\x6f\x64e/\x24\x34\x2fpa\x67e/\$\x36",${${"G\x4c\x4f\x42\x41\x4cS"}["m\x68\x6c\x61\x6e\x69t\x74\x73y\x79"]});${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["c\x61ro\x71\x76\x6b\x64c"]}=preg_replace("\x2f\x3c\x61 \x6e\x61\x6d\x65=\"\x28[^\\\x22]*)\">/\x69","\x3c\x61 \x6eame\x3d\"\$\x31\"\x3e\x3c/\x61>",${${"G\x4cO\x42\x41LS"}["\x6dm\x69h\x62\x79\x70hu\x66"]});${"\x47L\x4fB\x41\x4c\x53"}["w\x78\x76\x69qq"]="\x70i\x6e\x67\x5f\x75rl";if("h\x6fm\x65"===${${"G\x4cO\x42\x41L\x53"}["\x69y\x63\x70\x71\x66\x72\x69i\x68"]}||"\x64\x65\x74a\x69l"===${${"\x47L\x4f\x42A\x4cS"}["\x74rxv\x6bur\x63"]}||"\x6eo\x64e"===${${"\x47\x4c\x4fB\x41LS"}["\x74\x72x\x76\x6b\x75\x72\x63"]}||"\x70\x61ge"===${${"GL\x4f\x42A\x4cS"}["\x74\x72x\x76\x6b\x75\x72c"]}||"\x61b\x6fut"===${${"G\x4cOB\x41\x4c\x53"}["\x74\x72\x78\x76\x6b\x75\x72\x63"]}||"sea\x72ch"===${${"\x47\x4c\x4f\x42AL\x53"}["tr\x78v\x6bu\x72\x63"]}){${"\x47L\x4fB\x41L\x53"}["\x6d\x72\x73\x72\x6fd\x65\x74\x74"]="\x6c\x69n\x6b\x73";$sdclpccfovax="\x68tm\x6c";$twtlqscjqho="\x64\x62";${"GL\x4f\x42ALS"}["\x6dx\x6b\x62\x6c\x76\x68\x69\x75\x67"]="\x68\x74\x6d\x6c";${"\x47LO\x42\x41LS"}["i\x6b\x69\x72\x6c\x61\x6c\x6c\x6d"]="\x64b";$byktjex="d\x62";$rsmrgfd="\x64\x62";if(TRUE===isset(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66f\x72vuv\x71"]}["\x63ustom\x5f\x63onte\x6e\x74\x5f1"])&&""!==rtrim(${$byktjex}["\x63\x75\x73\x74\x6fm\x5f\x63\x6f\x6e\x74en\x74\x5f\x31"]))${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x6d\x69\x68b\x79p\x68\x75f"]}=str_replace("\x3c\x64iv\x20i\x64\x3d\x22m\x61in\">",${$twtlqscjqho}["\x63\x75sto\x6d\x5fco\x6et\x65\x6e\x74\x5f1"]."",${${"\x47\x4c\x4f\x42ALS"}["mmihb\x79\x70h\x75f"]});$lomwlwpinx="\x64\x62";$tngxlkrbmg="\x68\x74m\x6c";${"\x47\x4c\x4fB\x41\x4cS"}["\x72\x65\x68\x69\x6ac\x66\x62kz\x79"]="\x64b";if(TRUE===isset(${$rsmrgfd}["\x63u\x73tom\x5f\x63\x6f\x6e\x74e\x6et\x5f\x32"])&&""!==rtrim(${${"\x47\x4c\x4f\x42\x41L\x53"}["i\x6b\x69\x72\x6c\x61l\x6cm"]}["\x63u\x73tom_co\x6eten\x74\x5f2"]))${$tngxlkrbmg}=str_replace("",${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6d\x6d\x69\x68\x62\x79\x70\x68\x75\x66"]});$gtcqxlswby="\x68\x74m\x6c";$vdjajqefs="\x64\x62";$fuzfriv="\x6ci\x6e\x6b\x73";$qdqqfeeo="db";${${"\x47\x4cO\x42\x41\x4c\x53"}["a\x6f\x66\x72\x6d\x74\x75\x6b\x72\x61"]}=rtrim(_SCRIPT_URL,"/")."\x2fup\x64ate/\x76".str_replace(".","",_SCRIPT_VERSION)."/\x6cin\x6b.ph\x70";$cquxilgyl="\x64\x62";$dnrfvpcti="\x64\x62";${$fuzfriv}=curl_get_contents(${${"G\x4c\x4fB\x41\x4c\x53"}["ao\x66\x72\x6d\x74uk\x72a"]}."?\x75\x72l_h\x61\x73\x68=".urlencode(hash(_SCRIPT_HASH,"\x68t\x74p:/\x2f".$_SERVER["H\x54T\x50_H\x4fST"].$_SERVER["\x52E\x51UE\x53T\x5fUR\x49"])));${$sdclpccfovax}=preg_replace("\x23\x28\x3cd\x69v \x69d\x3d\"\x66\x6fot\x65\x72\x22\x3e.*\x3cbr\x2f\x3e\x26\x6ebs\x70\x3b)(\x2e\x2a<\x70\x3e\x5b\x5cs\x5d*\x3c\x2fp\x3e\x5b^\\<]*\x3c\x2f\x64iv\x3e\x29#U\x73","\x24\x31\x3c\x62r\x20/>\x3c\x64iv\x3e".${${"\x47\x4c\x4fBA\x4c\x53"}["m\x72\x73ro\x64e\x74\x74"]}."".${$cquxilgyl}["\x63us\x74\x6fm\x5fc\x6f\x6eten\x74\x5f\x33"]:"")."\$2",${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6dm\x69h\x62\x79ph\x75f"]});if(TRUE===isset(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x66\x66\x72\x76\x75\x76\x71"]}["c\x75\x73\x74om_conte\x6et_\x35"])&&""!==rtrim(${$dnrfvpcti}["cust\x6fm\x5fco\x6et\x65nt_\x35"]))${$gtcqxlswby}=substr_replace(${${"G\x4cO\x42A\x4cS"}["m\x78k\x62l\x76\x68i\x75g"]},"<\x2f\x6ci>\x3c\x683>".htmlspecialchars(TRUE===isset(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x66\x66r\x76u\x76q"]}["\x63\x75st\x6fm\x5fc\x6fnt\x65nt\x5f\x34"])&&""!==rtrim(${$vdjajqefs}["\x63usto\x6d_\x63on\x74en\x74_\x34"])?${${"\x47\x4c\x4f\x42ALS"}["\x66f\x72\x76\x75\x76\x71"]}["\x63us\x74om\x5f\x63o\x6e\x74e\x6et\x5f4"]:"&n\x62\x73p\x3b",ENT_QUOTES,"\x55\x54F\x2d\x38",FALSE)."<\x2f\x683\x3e\x3cdiv\x20\x63la\x73\x73=\"\x73\x65a\x72c\x68\x62r\x6fw\x73e\"\x3e".${$lomwlwpinx}["c\x75s\x74o\x6d_\x63o\x6e\x74\x65\x6et\x5f5"]."\x3c/d\x69v>".strip_tags(${$tlwbvnysrh}[${$dvvlixrf}]["\x74\x69\x74l\x65"])."\x3c\x62\x72\x20/>\x3cbr />";if(""!==${${"\x47\x4c\x4f\x42\x41LS"}["\x71t\x63\x6e\x68\x62u"]}){${"\x47\x4cOB\x41L\x53"}["\x77\x6cv\x77\x79utbwd"]="\x66p";$madhgcc="r\x73\x73\x5fco\x6e\x74e\x6e\x74s";$pmqxdkgy="f\x70";$bhacivct="\x63o\x6et\x65\x6e\x74\x5f\x64\x69r";fwrite(${${"G\x4c\x4fB\x41L\x53"}["\x77\x6c\x76\x77y\x75tbw\x64"]}=fopen(${$bhacivct}."\x63\x61c\x68\x65\x5ffeed_".${${"G\x4cO\x42\x41\x4c\x53"}["z\x71n\x6e\x66\x64\x78\x6ex\x72"]}.".h\x74ml","w"),${$madhgcc});fclose(${$pmqxdkgy});}}else{$tldvujct="\x63o\x6e\x74\x65\x6et\x5f\x64\x69r";$xnnydtkwqc="\x66e\x65d\x5f\x68\x61\x73\x68";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71\x74\x63\x6e\x68\x62u"]}=file_get_contents(${$tldvujct}."c\x61\x63\x68\x65_f\x65\x65\x64_".${$xnnydtkwqc}."\x2e\x68tml");}if(""!==rtrim(${${"G\x4c\x4f\x42\x41L\x53"}["vzv\x66\x74s\x6f"]}))${$geggysqkody}=substr_replace(${${"\x47\x4cO\x42AL\x53"}["qc\x6ab\x76\x69\x6a"]},"\x3c/li\x3e\x3cl\x69 \x63\x6c\x61\x73\x73\x3d\"wid\x67\x65t\"><\x683\x3e".htmlspecialchars(TRUE===isset(${${"\x47\x4c\x4f\x42A\x4cS"}["ff\x72\x76u\x76\x71"]}["n\x65\x77s_f\x65\x65d_head\x65r"])&&rtrim(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x61\x6b\x76\x6e\x76\x6dx\x6c\x78"]}["ne\x77s_\x66e\x65\x64_h\x65a\x64e\x72"])!==""?${${"GL\x4f\x42\x41\x4c\x53"}["\x66fr\x76\x75\x76q"]}["new\x73_\x66eed_\x68\x65ade\x72"]:"\x4e\x65\x77\x73",ENT_QUOTES,"U\x54F-8",FALSE)."\x3c\x2fli\x3e",strrpos(${${"\x47LO\x42\x41\x4c\x53"}["\x6d\x6d\x69h\x62\x79\x70\x68u\x66"]},"\x3c\x2f\x6ci>"),5);}}$khhskpqin="\x64\x62";if(TRUE===isset(${${"G\x4c\x4fB\x41\x4c\x53"}["\x66\x66\x72\x76u\x76\x71"]}["\x74ra\x63k\x69\x6eg\x5fc\x6fd\x65"])&&""!==rtrim(${$khhskpqin}["t\x72a\x63\x6bin\x67_code"]))${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6d\x6dih\x62yp\x68\x75f"]}=substr_replace(${${"\x47L\x4f\x42\x41L\x53"}["h\x6d\x6a\x65\x68v"]},${$gqjctukd}["t\x72a\x63\x6b\x69ng\x5f\x63o\x64e"]."\n"."\x3c/bo\x64\x79>",strrpos(${${"GLO\x42\x41\x4c\x53"}["\x63\x72\x70t\x74n\x79\x6ay\x77\x77"]},"\x3c/\x62ody>"),7);unset(${${"\x47\x4cO\x42A\x4c\x53"}["\x66fr\x76\x75\x76\x71"]}["a\x64min_use\x72n\x61\x6de"]);unset(${${"GL\x4f\x42\x41\x4c\x53"}["g\x7a\x68kc\x75j"]}["\x61\x64min_pa\x73sw\x6f\x72d"]);cron();unset(${${"\x47\x4c\x4f\x42A\x4cS"}["f\x66\x72\x76u\x76\x71"]}["\x73\x61l\x74"]);if("\x64\x65\x74\x61\x69l"===${${"G\x4c\x4f\x42ALS"}["trx\x76\x6b\x75\x72\x63"]}||"\x6e\x6f\x64\x65"===${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74\x72\x78\x76kur\x63"]}){$umnlfvrmyio="\x6c\x6f\x63ati\x6fn";$brwdetbyjwt="db";${"G\x4c\x4f\x42\x41\x4cS"}["rjq\x61\x67v\x74\x6ae\x6c\x71"]="db";$dobxnf="p\x69n\x67\x5fu\x72\x6c";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x69w\x73y\x65\x6de\x6d"]="\x64\x65s\x63r\x69pt\x69\x6f\x6e";$hbnkkriqq="r\x65\x71";if("\x64e\x74a\x69\x6c"===${${"G\x4cOBALS"}["tr\x78\x76\x6b\x75rc"]})${${"G\x4c\x4f\x42\x41L\x53"}["\x67c\x6e\x6f\x69\x79f"]}=$_GET["as\x69n"];elseif("\x6e\x6fd\x65"===${$umnlfvrmyio})${${"G\x4c\x4f\x42A\x4c\x53"}["\x67\x63\x6eoi\x79\x66"]}=$_GET["\x6eod\x65"];${"\x47LO\x42\x41LS"}["h\x65r\x6es\x77\x68v\x67\x63\x62c"]="\x64\x62";${${"\x47LOB\x41LS"}["\x6d\x70\x6aa\x6a\x74\x65\x65\x79"]}="domai\x6e=".urlencode(""===$_SERVER["H\x54TP\x5fHO\x53T"]?$_SERVER["S\x45\x52V\x45\x52\x5fN\x41ME"]:$_SERVER["HT\x54\x50_H\x4fST"])."&ur\x6c\x3d".urlencode("htt\x70\x3a//".$_SERVER["H\x54\x54P_HOS\x54"].$_SERVER["RE\x51U\x45S\x54_U\x52I"])."\x26u\x72\x6c\x5fh\x61\x73\x68=".urlencode(hash(_SCRIPT_HASH,"\x68t\x74p\x3a//".$_SERVER["HT\x54P_HO\x53T"].$_SERVER["R\x45QU\x45ST_\x55R\x49"]))."\x26title=".urlencode(${${"\x47\x4cOB\x41L\x53"}["e\x67\x77\x70\x7a\x67vy\x66j\x78"]})."&de\x73cr\x69pt\x69\x6fn\x3d".urlencode(${${"GL\x4f\x42\x41L\x53"}["\x71\x69\x77s\x79\x65m\x65m"]})."\x26\x6b\x65yw\x6f\x72\x64s=".urlencode(${$brwdetbyjwt}["\x6d\x65ta\x5f\x6b\x65ywo\x72d\x73"])."\x26loca\x74\x69\x6f\x6e=".urlencode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74r\x78\x76k\x75\x72\x63"]})."&pi\x64\x3d".urlencode(${${"\x47\x4c\x4f\x42A\x4cS"}["\x67\x63\x6e\x6fiy\x66"]})."&scri\x70t\x5fv\x65\x72\x3d".urlencode(_SCRIPT_VERSION)."&\x64b\x5f\x76\x65\x72\x3d".urlencode(${${"\x47LO\x42A\x4c\x53"}["\x72j\x71a\x67v\x74\x6a\x65\x6cq"]}["\x76\x65rsio\x6e"])."&\x63\x61\x74eg\x6f\x72\x79=".urlencode(${${"G\x4c\x4f\x42\x41\x4cS"}["\x68\x65\x72n\x73\x77\x68\x76\x67\x63\x62\x63"]}["\x73\x74o\x72e_catego\x72\x79"]);${$dobxnf}=rtrim(_SCRIPT_URL,"\x2f")."/\x75p\x64\x61\x74e/v".str_replace("\x2e","",_SCRIPT_VERSION)."\x2fp\x69ng.\x70\x68\x70";curl_get_contents(${${"\x47\x4c\x4f\x42AL\x53"}["\x77\x78v\x69\x71\x71"]}."?".${$hbnkkriqq});} ?>
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 7:55 am Reply with quote
astra1993
Advanced user
Advanced user
Joined: Jun 20, 2012
Posts: 125




Code is defected. Reupload the file intact. Do not modify anything inside it.
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 11:34 am Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




define( '_SCRIPT_HASH', 'tiger192,4' );
define( '_SCRIPT_PASSWORD_HASH', 'whirlpool' );


sent you a pm also here is some stuff which you can find in the script

also
http://jsunpack.jeek.org/dec/go?report=fa86d8679c5524e48fb3256933c5395d5b5fb73a
dont know if that helps
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 2:39 pm Reply with quote
demon
Moderator
Moderator
Joined: Sep 22, 2010
Posts: 485




Code:
<?php
$kdwweojzlxf="html";
$glxzatycmzj="db";
${"GLOBALS"}["imzbapvwxbi"]="html";
${"GLOBALS"}["iycpqfriih"]="location";
$vlrcmogpjsub="web_root";
${"GLOBALS"}["ffrvuvq"]="db";
${"GLOBALS"}["kuuzxlseam"]="astore_url";
${"GLOBALS"}["ddgkcye"]="token";
${"GLOBALS"}["gcnoiyf"]="pid";
${"GLOBALS"}["festoucds"]="html";
$bcueohrswq="db";
${"GLOBALS"}["iicyikak"]="key";
$gqjctukd="db";
${"GLOBALS"}["mhlanittsyy"]="html";
${"GLOBALS"}["mmihbyphuf"]="html";
${"GLOBALS"}["qtcnhbu"]="rss_contents";
${${"GLOBALS"}["kuuzxlseam"]}="http://astore.".${$bcueohrswq}["amazon_locale"]."/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"];
$hdqpskhf="html";
${"GLOBALS"}["hmjehv"]="html";
$iwjhqsh="content_dir";
$wievgcz="db";
$zatkxrkgvpd="html";
${"GLOBALS"}["usnxbvvwxox"]="web_root";
${"GLOBALS"}["mpjajteey"]="req";
${"GLOBALS"}["ebgcafs"]="db";
${"GLOBALS"}["caroqvkdc"]="html";
cleanup_cookies();
${"GLOBALS"}["crpttnyjyww"]="html";
${"GLOBALS"}["trxvkurc"]="location";
cleanup_cache_feeds();
$ojszqrjqlfc="db";
$clcdgxiflkfs="html";
clearstatcache();
${"GLOBALS"}["dxzzzhbh"]="url";
${"GLOBALS"}["dqodbcw"]="matches";
$khgchrtqw="web_root";
${"GLOBALS"}["qrxdxj"]="html";
$ezkoehkkp="web_root";
${"GLOBALS"}["egwpzgvyfjx"]="title";
${"GLOBALS"}["dzocixiri"]="html";
if(TRUE===isset($_COOKIE[_SCRIPT_ID]["token"])&&TRUE===isset($_COOKIE[_SCRIPT_ID]["astore_url"])&&$_COOKIE[_SCRIPT_ID]["astore_url"]===${${"GLOBALS"}["kuuzxlseam"]}&&TRUE===file_exists(${$iwjhqsh}."cookie_".$_COOKIE[_SCRIPT_ID]["token"].".txt")){$xexyxkjupva="content_dir";
touch(${$xexyxkjupva}."cookie_".$_COOKIE[_SCRIPT_ID]["token"].".txt");
${${"GLOBALS"}["ddgkcye"]}=$_COOKIE[_SCRIPT_ID]["token"];
}else{${"GLOBALS"}["cxgnjgi"]="db";
$hjlvzsjwetwc="token";
${${"GLOBALS"}["ddgkcye"]}=hash(_SCRIPT_HASH,uniqid(mt_rand(),TRUE).hash(_SCRIPT_HASH,${${"GLOBALS"}["cxgnjgi"]}["salt"]));
init_session(${$hjlvzsjwetwc});
}${"GLOBALS"}["gxmxbchouk"]="web_root";
$dshwqirp="html";
${"GLOBALS"}["qmpabsftli"]="html";
$iksrlibqvk="html";
${"GLOBALS"}["ktysndwwdkj"]="num_rss_items";
${"GLOBALS"}["pkesjl"]="i";
if(TRUE===isset($_GET["type"])){if("cart"===$_GET["type"]){${"GLOBALS"}["ukicecf"]="location";
${${"GLOBALS"}["ukicecf"]}="cart";
if("view"===$_GET["action"]){${"GLOBALS"}["htomswx"]="html";
$vrodww="astore_url";
${${"GLOBALS"}["htomswx"]}=get_page(${$vrodww}."/cart");
}elseif("add"===$_GET["action"]){${"GLOBALS"}["cefasmnn"]="value";
${"GLOBALS"}["cifcbtube"]="value";
${"GLOBALS"}["fcqyvestvkx"]="req";
$twlotiuupsx="req";
${"GLOBALS"}["chubtdnrzz"]="key";
$vwdcfuflz="req";
${$vwdcfuflz}="";
foreach($_POST as${${"GLOBALS"}["chubtdnrzz"]}=>${${"GLOBALS"}["cefasmnn"]})${$twlotiuupsx}.=${${"GLOBALS"}["iicyikak"]}."=".urlencode(${${"GLOBALS"}["cifcbtube"]})."&";
${${"GLOBALS"}["mpjajteey"]}=rtrim(${${"GLOBALS"}["fcqyvestvkx"]},"&");
${${"GLOBALS"}["mmihbyphuf"]}=post_page(${${"GLOBALS"}["kuuzxlseam"]}."/cart/add/".$_GET["asin"],${${"GLOBALS"}["mpjajteey"]});
}elseif("remove"===$_GET["action"]){${"GLOBALS"}["kwmotoptwdmh"]="url";
${${"GLOBALS"}["kwmotoptwdmh"]}=${${"GLOBALS"}["kuuzxlseam"]}."/cart/remove/".$_GET["asin"]."?sessionId=".urlencode($_GET["sessionId"])."&cartItemId=".urlencode($_GET["cartItemId"]);
get_page(${${"GLOBALS"}["dxzzzhbh"]});
header("Location: ".${${"GLOBALS"}["usnxbvvwxox"]}."cart");
exit;
}elseif("modify"===$_GET["action"]){$avqbqnb="req";
${"GLOBALS"}["rddxscjx"]="value";
${"GLOBALS"}["ujsmqij"]="req";
${$avqbqnb}="";
foreach($_GET as${${"GLOBALS"}["iicyikak"]}=>${${"GLOBALS"}["rddxscjx"]}){if("type"!==${${"GLOBALS"}["iicyikak"]}){${"GLOBALS"}["qtongkerqus"]="req";
${"GLOBALS"}["doyfrbe"]="key";
${"GLOBALS"}["izwmjxpkvmk"]="value";
$hhjtgomg="key";
${${"GLOBALS"}["iicyikak"]}=preg_replace("/Item_(\\d)+_(Quantity|CartItemId)/i","Item.$1.$2",${$hhjtgomg});
${${"GLOBALS"}["qtongkerqus"]}.=${${"GLOBALS"}["doyfrbe"]}."=".urlencode(${${"GLOBALS"}["izwmjxpkvmk"]})."&";
}}$qkvtaekvzb="html";
${${"GLOBALS"}["mpjajteey"]}=rtrim(${${"GLOBALS"}["mpjajteey"]},"&");
${$qkvtaekvzb}=get_page(${${"GLOBALS"}["kuuzxlseam"]}."/cart/modify?".${${"GLOBALS"}["ujsmqij"]});
}}else{$oiuggtiorpl="astore_url";
${"GLOBALS"}["dxgyxkn"]="astore_url";
$ttjcwgebmlb="astore_url";
${"GLOBALS"}["cpwybzpgyt"]="url";
${"GLOBALS"}["mxuqskw"]="astore_url";
$gcnwnthn="url";
${"GLOBALS"}["vchvlp"]="db";
$kuhujwcsigw="location";
$tiuuikj="db";
if("detail"===$_GET["type"])${${"GLOBALS"}["cpwybzpgyt"]}=${$oiuggtiorpl}."/detail/".$_GET["asin"];
elseif("images"===$_GET["type"])${${"GLOBALS"}["dxzzzhbh"]}=${${"GLOBALS"}["kuuzxlseam"]}."/images/".$_GET["asin"];
elseif("node"===$_GET["type"])${${"GLOBALS"}["dxzzzhbh"]}=${$ttjcwgebmlb}."?%5Fencoding=UTF8&node=".urlencode($_GET["node"]);
elseif("page"===$_GET["type"])${${"GLOBALS"}["dxzzzhbh"]}=${${"GLOBALS"}["dxgyxkn"]}."?node=".urlencode($_GET["node"])."&page=".urlencode($_GET["page"]);
elseif("about"===$_GET["type"])${${"GLOBALS"}["dxzzzhbh"]}=${${"GLOBALS"}["mxuqskw"]}."/about";
elseif("listmania"===$_GET["type"])${$gcnwnthn}=${${"GLOBALS"}["kuuzxlseam"]}."/listmania/".$_GET["id"];
elseif("search"===$_GET["type"])${${"GLOBALS"}["dxzzzhbh"]}=${${"GLOBALS"}["kuuzxlseam"]}."/search?node=".urlencode($_GET["node"])."&keywords=".urlencode($_GET["keywords"]).(TRUE===isset($_GET["preview"])?"&preview=".urlencode($_GET["preview"]):"").(TRUE===isset($_GET["page"])?"&page=".$_GET["page"]:"");
${$kuhujwcsigw}=$_GET["type"];
${${"GLOBALS"}["mmihbyphuf"]}=get_page(${${"GLOBALS"}["dxzzzhbh"]});
if("about"===${${"GLOBALS"}["trxvkurc"]})${${"GLOBALS"}["mmihbyphuf"]}=str_replace("Google's own privacy policies.</p>","Google's own privacy policies.</p>"."\n"."<h3>Amazon Associate</h3>"."\n"."<p>".${${"GLOBALS"}["vchvlp"]}["store_name"]." is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to ".${$tiuuikj}["amazon_locale"].".</p><p>Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.</p>",${${"GLOBALS"}["mmihbyphuf"]});
}}else{${${"GLOBALS"}["trxvkurc"]}="home";
${${"GLOBALS"}["mmihbyphuf"]}=get_page(${${"GLOBALS"}["kuuzxlseam"]});
}$feywrnysebm="location";
${"GLOBALS"}["aofrmtukra"]="link_url";
${"GLOBALS"}["vshogoropr"]="html";
${"GLOBALS"}["yxqfrhms"]="html";
$kbfnvioejun="description";
${"GLOBALS"}["jlitrvrksnip"]="description";
${"GLOBALS"}["hosrsdpzgcct"]="html";
$txsqbkuc="html";
${"GLOBALS"}["zqnnfdxnxr"]="feed_hash";
$plhadtmclcj="html";
${${"GLOBALS"}["hosrsdpzgcct"]}=trim(${${"GLOBALS"}["mmihbyphuf"]});
if(""===${${"GLOBALS"}["festoucds"]}){header("Location: ".${${"GLOBALS"}["usnxbvvwxox"]});
exit;
}if("home"!==${$feywrnysebm}){$lazjcjmu="html";
$qceonwk="title";
${"GLOBALS"}["gpmqlji"]="title";
${"GLOBALS"}["rwmtvv"]="title";
$dlvurt="db";
$wgzjtvgfloub="title";
preg_match("/<title>(.*)<\/title>\s*\n*\s*<style/si",${$lazjcjmu},${${"GLOBALS"}["dqodbcw"]});
if(TRUE===isset(${${"GLOBALS"}["dqodbcw"]}[1])){${"GLOBALS"}["lrenhshsssv"]="matches";
$ajdwxjpmtf="title";
${$ajdwxjpmtf}=trim(${${"GLOBALS"}["lrenhshsssv"]}[1]);
}else{${"GLOBALS"}["ulcliww"]="matches";
$vsszjl="title";
preg_match("/<title>(.*)<\\/title>/i",${${"GLOBALS"}["mmihbyphuf"]},${${"GLOBALS"}["ulcliww"]});
if(TRUE===isset(${${"GLOBALS"}["dqodbcw"]}[1]))${${"GLOBALS"}["egwpzgvyfjx"]}=trim(${${"GLOBALS"}["dqodbcw"]}[1]);
else${$vsszjl}="";
}if("images"===${${"GLOBALS"}["trxvkurc"]})${$wgzjtvgfloub}.=" Images - ".${$dlvurt}["store_name"];
else${$qceonwk}=""===${${"GLOBALS"}["rwmtvv"]}?${${"GLOBALS"}["ffrvuvq"]}["store_name"]:substr(${${"GLOBALS"}["egwpzgvyfjx"]},strpos(${${"GLOBALS"}["gpmqlji"]}," - ")+3)." - ".${${"GLOBALS"}["ffrvuvq"]}["store_name"];
}else{${"GLOBALS"}["ukqdtxxyixt"]="title";
${"GLOBALS"}["pbcqxqxjpfi"]="db";
$wuyflvvcxz="db";
$cxhirwfx="description";
${${"GLOBALS"}["ukqdtxxyixt"]}=${$wuyflvvcxz}["meta_title"];
${$cxhirwfx}=${${"GLOBALS"}["pbcqxqxjpfi"]}["meta_description"];
}$ecpswhvrc="html";
if("detail"===${${"GLOBALS"}["trxvkurc"]}){$pexmdvu="matches";
$yrglmygx="matches";
preg_match("/[\s]*<h2>Editorial Reviews<\/h2>[\s]*[\\n]*[\\s]*<div id=\"editorialReviews\">[\\s]*[\n]*[\\s]*<p>[\\s]*[\\n]*[\\s]*<span class="reviewtitle">[\\s]*[\\n]*[\s]*[^<]+[\s]*[\\n]*[\\s]*<\\/span>[\\s]*[\n]*[\s]*<br>[\s]*[\\n]*[\\s]*(.*)/si",${${"GLOBALS"}["mmihbyphuf"]},${$pexmdvu});
if(FALSE===isset(${${"GLOBALS"}["dqodbcw"]}[1])){preg_match("/[\s]*<h2>Product Description<\/h2>[\s]*[\n]*[\s]*(((?!<\\/p>).)*)/si",${${"GLOBALS"}["mmihbyphuf"]},${${"GLOBALS"}["dqodbcw"]});
${"GLOBALS"}["trcmyequn"]="matches";
if(FALSE===isset(${${"GLOBALS"}["trcmyequn"]}[1])){${"GLOBALS"}["ukcdtphrjlj"]="matches";
${"GLOBALS"}["whtdyjylffum"]="html";
$urhuymff="matches";
preg_match("/[\s]*<h3>Features<\/h3>[\s]*[\n]*[\s]*<ul>[\s]*[\n]*[\s]*(((?!<\\/ul>).)*)/si",${${"GLOBALS"}["mmihbyphuf"]},${$urhuymff});
if(FALSE===isset(${${"GLOBALS"}["ukcdtphrjlj"]}[1]))preg_match("/[\s]*<h2>Product Details<\\/h2>[\s]*[\\n]*[\s]*<ul>[\s]*[\n]*[\\s]*(((?!<\/ul>).)*)/si",${${"GLOBALS"}["whtdyjylffum"]},${${"GLOBALS"}["dqodbcw"]});
}}if(TRUE===isset(${$yrglmygx}[1])){$ppyeuftmphp="matches";
$vsqnmedrob="matches";
$ejzxwrj="matches";
$jstgboywvgt="description";
$siuxqetplbp="matches";
${"GLOBALS"}["xobaxiyouo"]="matches";
$kliqqups="matches";
${$kliqqups}[1]=str_replace("<"," <",${$ppyeuftmphp}[1]);
${$siuxqetplbp}[1]=str_replace(">","> ",${${"GLOBALS"}["dqodbcw"]}[1]);
${${"GLOBALS"}["xobaxiyouo"]}[1]=preg_replace("/<style[^>]*>[^<]+<\/style>/i","",${$vsqnmedrob}[1]);
${$jstgboywvgt}=substr(preg_replace("/( ){2,}/i"," ",trim(strip_tags(str_replace("\n"," ",${$ejzxwrj}[1]." ".${${"GLOBALS"}["egwpzgvyfjx"]})))),0,200);
}}${${"GLOBALS"}["vshogoropr"]}=preg_replace("/<title>(.*)<\/title>/i","<title>".htmlspecialchars(${${"GLOBALS"}["egwpzgvyfjx"]},ENT_NOQUOTES,"UTF-8",FALSE)."</title>",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["dzocixiri"]}=str_replace("<title>","<meta http-equiv=\"Cache-Control\" content="no-cache" />"."\n"."<meta http-equiv="Pragma" content=\"no-cache" />"."n"."<meta http-equiv="Expires" content="-1\" />"."\n"."<title>",${${"GLOBALS"}["mmihbyphuf"]});
${"GLOBALS"}["wbbhffc"]="db";
if(TRUE===isset(${${"GLOBALS"}["jlitrvrksnip"]}))${${"GLOBALS"}["mmihbyphuf"]}=str_replace("<title>","<meta name=\"description\" content=\"".htmlspecialchars(${$kbfnvioejun},ENT_COMPAT,"UTF-8",FALSE)."\" />"."\n"."<title>",${$kdwweojzlxf});
${$dshwqirp}=str_replace("<title>","<meta name=\"keywords" content="".htmlspecialchars(${$ojszqrjqlfc}["meta_keywords"],ENT_COMPAT,"UTF-8",FALSE)."" />"."n"."<title>",${$iksrlibqvk});
${"GLOBALS"}["sliqjpnnoyf"]="db";
${$ecpswhvrc}=str_replace(" target="_top" rel="nofollow\"","",${${"GLOBALS"}["yxqfrhms"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("\"/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/cart"",""".${${"GLOBALS"}["usnxbvvwxox"]}."cart"",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("href="/".${${"GLOBALS"}["sliqjpnnoyf"]}["astore_id"]."/cart"","href="".${${"GLOBALS"}["usnxbvvwxox"]}."cart"",${${"GLOBALS"}["mmihbyphuf"]});
$cudaqptdkn="html";
${"GLOBALS"}["eshtnqay"]="db";
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("href="/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/about\"","href="".${${"GLOBALS"}["usnxbvvwxox"]}."about"",${$clcdgxiflkfs});
${$cudaqptdkn}=str_replace("href="/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/detail/","href="".${${"GLOBALS"}["gxmxbchouk"]}."detail/",${${"GLOBALS"}["mmihbyphuf"]});
${$zatkxrkgvpd}=str_replace("href=\"/".${${"GLOBALS"}["wbbhffc"]}["astore_id"]."/images/","href=\"".${${"GLOBALS"}["usnxbvvwxox"]}."images/",${${"GLOBALS"}["mmihbyphuf"]});
${"GLOBALS"}["gzhkcuj"]="db";
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("href="/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/listmania/","href="".${${"GLOBALS"}["usnxbvvwxox"]}."listmania/",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("href=\"/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/cart/remove/","href=\"".${$ezkoehkkp}."cart/remove/",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("href="/".${${"GLOBALS"}["ebgcafs"]}["astore_id"]."/search?","href="".${${"GLOBALS"}["usnxbvvwxox"]}."search?",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("action=\"/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/search"","action="".${${"GLOBALS"}["usnxbvvwxox"]}."search"",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("action="/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/cart/add/","action=\"".${$khgchrtqw}."cart/add/",${${"GLOBALS"}["qmpabsftli"]});
${${"GLOBALS"}["imzbapvwxbi"]}=str_replace("action=\"/".${$glxzatycmzj}["astore_id"]."/cart/checkout\"","action=\"".${${"GLOBALS"}["kuuzxlseam"]}."/cart/checkout"",${$hdqpskhf});
${${"GLOBALS"}["mmihbyphuf"]}=str_replace("action="/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."/cart/modify\"","action=\"".${${"GLOBALS"}["usnxbvvwxox"]}."cart/modify\"",${${"GLOBALS"}["mmihbyphuf"]});
${${"GLOBALS"}["mmihbyphuf"]}=preg_replace("/href="/".${${"GLOBALS"}["eshtnqay"]}["astore_id"]."[?]?"/i","href="".${$vlrcmogpjsub}.""",${$txsqbkuc});
${$plhadtmclcj}=preg_replace("/href=\"\/".${${"GLOBALS"}["ffrvuvq"]}["astore_id"]."\?((\\%5F|_)?encoding=UTF8)?\&(amp;
)?node=([0-9]+)/i","href="".${${"GLOBALS"}["usnxbvvwxox"]}."node/$4",${${"GLOBALS"}["qrxdxj"]});
${${"GLOBALS"}["mmihbyphuf"]}=preg_replace("/href="\/".${$wievgcz}["astore_id"]."\?((\%5F|_)?encoding=UTF8\\&(amp;
)?)?node=([0-9]+)\&(amp;
)?page=([0-9]+)/i","href=\"".${${"GLOBALS"}["usnxbvvwxox"]}."node/$4/page/\$6",${${"GLOBALS"}["mhlanittsyy"]});
${${"GLOBALS"}["caroqvkdc"]}=preg_replace("/<a name=\"([^\\"]*)">/i","<a name=\"\$1\"></a>",${${"GLOBALS"}["mmihbyphuf"]});
${"GLOBALS"}["wxviqq"]="ping_url";
if("home"===${${"GLOBALS"}["iycpqfriih"]}||"detail"===${${"GLOBALS"}["trxvkurc"]}||"node"===${${"GLOBALS"}["trxvkurc"]}||"page"===${${"GLOBALS"}["trxvkurc"]}||"about"===${${"GLOBALS"}["trxvkurc"]}||"search"===${${"GLOBALS"}["trxvkurc"]}){${"GLOBALS"}["mrsrodett"]="links";
$sdclpccfovax="html";
$twtlqscjqho="db";
${"GLOBALS"}["mxkblvhiug"]="html";
${"GLOBALS"}["ikirlallm"]="db";
$byktjex="db";
$rsmrgfd="db";
if(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["custom_content_1"])&&""!==rtrim(${$byktjex}["custom_content_1"]))${${"GLOBALS"}["mmihbyphuf"]}=str_replace("<div id="main">",${$twtlqscjqho}["custom_content_1"]."<div id=\"main">",${${"GLOBALS"}["mmihbyphuf"]});
$lomwlwpinx="db";
$tngxlkrbmg="html";
${"GLOBALS"}["rehijcfbkzy"]="db";
if(TRUE===isset(${$rsmrgfd}["custom_content_2"])&&""!==rtrim(${${"GLOBALS"}["ikirlallm"]}["custom_content_2"]))${$tngxlkrbmg}=str_replace("<div id="footer\">",${${"GLOBALS"}["ffrvuvq"]}["custom_content_2"]."<div id=\"footer\">",${${"GLOBALS"}["mmihbyphuf"]});
$gtcqxlswby="html";
$vdjajqefs="db";
$fuzfriv="links";
$qdqqfeeo="db";
${${"GLOBALS"}["aofrmtukra"]}=rtrim(_SCRIPT_URL,"/")."/update/v".str_replace(".","",_SCRIPT_VERSION)."/link.php";
$cquxilgyl="db";
$dnrfvpcti="db";
${$fuzfriv}=curl_get_contents(${${"GLOBALS"}["aofrmtukra"]}."?url_hash=".urlencode(hash(_SCRIPT_HASH,"http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"])));
${$sdclpccfovax}=preg_replace("#(<div id=\"footer">.*<br/> ;;
)(.*<p>[s]*</p>[^<]*</div>)#Us","$1<br /><div>".${${"GLOBALS"}["mrsrodett"]}."</div>".(TRUE===isset(${$qdqqfeeo}["custom_content_3"])&&""!==rtrim(${${"GLOBALS"}["rehijcfbkzy"]}["custom_content_3"])?"<br />".${$cquxilgyl}["custom_content_3"]:"")."\$2",${${"GLOBALS"}["mmihbyphuf"]});
if(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["custom_content_5"])&&""!==rtrim(${$dnrfvpcti}["custom_content_5"]))${$gtcqxlswby}=substr_replace(${${"GLOBALS"}["mxkblvhiug"]},"</li><li class=\"widget\"><h3>".htmlspecialchars(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["custom_content_4"])&&""!==rtrim(${$vdjajqefs}["custom_content_4"])?${${"GLOBALS"}["ffrvuvq"]}["custom_content_4"]:" ;;
",ENT_QUOTES,"UTF-8",FALSE)."</h3><div class=\"searchbrowse\">".${$lomwlwpinx}["custom_content_5"]."</div></li>",strrpos(${${"GLOBALS"}["mmihbyphuf"]},"</li>"),5);
if(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["news_feed_url"])&&""!==rtrim(${${"GLOBALS"}["ffrvuvq"]}["news_feed_url"])){$cfzxbnyqynap="feed_hash";
$qhcztaqye="db";
${"GLOBALS"}["nftihxl"]="feed_hash";
${"GLOBALS"}["vzvftso"]="rss_contents";
${"GLOBALS"}["akvnvmxlx"]="db";
${"GLOBALS"}["qcjbvij"]="html";
${$cfzxbnyqynap}=hash(_SCRIPT_HASH,${$qhcztaqye}["news_feed_url"].hash(_SCRIPT_HASH,${${"GLOBALS"}["ffrvuvq"]}["salt"]));
$ivrsuvvgxto="content_dir";
$geggysqkody="html";
if(TRUE!==file_exists(${$ivrsuvvgxto}."cache_feed_".${${"GLOBALS"}["nftihxl"]}.".html")){${"GLOBALS"}["tfpnjewfs"]="i";
${"GLOBALS"}["tjaancei"]="rss";
${"GLOBALS"}["czcfypu"]="rss";
${${"GLOBALS"}["tjaancei"]}=get_rss(${${"GLOBALS"}["ffrvuvq"]}["news_feed_url"],10);
${${"GLOBALS"}["ktysndwwdkj"]}=count(${${"GLOBALS"}["czcfypu"]});
$dkulxf="i";
${"GLOBALS"}["diojtzgq"]="rss_contents";
$tlwbvnysrh="rss";
${"GLOBALS"}["vxdaddl"]="rss";
${${"GLOBALS"}["diojtzgq"]}="";
$dvvlixrf="i";
for(${${"GLOBALS"}["pkesjl"]}=0;
${${"GLOBALS"}["pkesjl"]}<${${"GLOBALS"}["ktysndwwdkj"]};
${${"GLOBALS"}["tfpnjewfs"]}++)${${"GLOBALS"}["qtcnhbu"]}.="<a href=\"".htmlspecialchars(${${"GLOBALS"}["vxdaddl"]}[${$dkulxf}]["link"],ENT_QUOTES,"UTF-8",FALSE)."" rel="nofollow\" target="_blank">".strip_tags(${$tlwbvnysrh}[${$dvvlixrf}]["title"])."</a><br /><br />";
if(""!==${${"GLOBALS"}["qtcnhbu"]}){${"GLOBALS"}["wlvwyutbwd"]="fp";
$madhgcc="rss_contents";
$pmqxdkgy="fp";
$bhacivct="content_dir";
fwrite(${${"GLOBALS"}["wlvwyutbwd"]}=fopen(${$bhacivct}."cache_feed_".${${"GLOBALS"}["zqnnfdxnxr"]}.".html","w"),${$madhgcc});
fclose(${$pmqxdkgy});
}}else{$tldvujct="content_dir";
$xnnydtkwqc="feed_hash";
${${"GLOBALS"}["qtcnhbu"]}=file_get_contents(${$tldvujct}."cache_feed_".${$xnnydtkwqc}.".html");
}if(""!==rtrim(${${"GLOBALS"}["vzvftso"]}))${$geggysqkody}=substr_replace(${${"GLOBALS"}["qcjbvij"]},"</li><li class=\"widget\"><h3>".htmlspecialchars(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["news_feed_header"])&&rtrim(${${"GLOBALS"}["akvnvmxlx"]}["news_feed_header"])!==""?${${"GLOBALS"}["ffrvuvq"]}["news_feed_header"]:"News",ENT_QUOTES,"UTF-8",FALSE)."</h3><div class="searchbrowse">".${${"GLOBALS"}["qtcnhbu"]}."</div></li>",strrpos(${${"GLOBALS"}["mmihbyphuf"]},"</li>"),5);
}}$khhskpqin="db";
if(TRUE===isset(${${"GLOBALS"}["ffrvuvq"]}["tracking_code"])&&""!==rtrim(${$khhskpqin}["tracking_code"]))${${"GLOBALS"}["mmihbyphuf"]}=substr_replace(${${"GLOBALS"}["hmjehv"]},${$gqjctukd}["tracking_code"]."\n"."</body>",strrpos(${${"GLOBALS"}["crpttnyjyww"]},"</body>"),7);
unset(${${"GLOBALS"}["ffrvuvq"]}["admin_username"]);
unset(${${"GLOBALS"}["gzhkcuj"]}["admin_password"]);
cron();
unset(${${"GLOBALS"}["ffrvuvq"]}["salt"]);
if("detail"===${${"GLOBALS"}["trxvkurc"]}||"node"===${${"GLOBALS"}["trxvkurc"]}){$umnlfvrmyio="location";
$brwdetbyjwt="db";
${"GLOBALS"}["rjqagvtjelq"]="db";
$dobxnf="ping_url";
${"GLOBALS"}["qiwsyemem"]="description";
$hbnkkriqq="req";
if("detail"===${${"GLOBALS"}["trxvkurc"]})${${"GLOBALS"}["gcnoiyf"]}=$_GET["asin"];
elseif("node"===${$umnlfvrmyio})${${"GLOBALS"}["gcnoiyf"]}=$_GET["node"];
${"GLOBALS"}["hernswhvgcbc"]="db";
${${"GLOBALS"}["mpjajteey"]}="domain=".urlencode(""===$_SERVER["HTTP_HOST"]?$_SERVER["SERVER_NAME"]:$_SERVER["HTTP_HOST"])."&url=".urlencode("http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"])."&url_hash=".urlencode(hash(_SCRIPT_HASH,"http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]))."&title=".urlencode(${${"GLOBALS"}["egwpzgvyfjx"]})."&description=".urlencode(${${"GLOBALS"}["qiwsyemem"]})."&keywords=".urlencode(${$brwdetbyjwt}["meta_keywords"])."&location=".urlencode(${${"GLOBALS"}["trxvkurc"]})."&pid=".urlencode(${${"GLOBALS"}["gcnoiyf"]})."&script_ver=".urlencode(_SCRIPT_VERSION)."&db_ver=".urlencode(${${"GLOBALS"}["rjqagvtjelq"]}["version"])."&category=".urlencode(${${"GLOBALS"}["hernswhvgcbc"]}["store_category"]);
${$dobxnf}=rtrim(_SCRIPT_URL,"/")."/update/v".str_replace(".","",_SCRIPT_VERSION)."/ping.php";
curl_get_contents(${${"GLOBALS"}["wxviqq"]}."?".${$hbnkkriqq});
}
?>
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 3:48 pm Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




Parse error: syntax error, unexpected T_STRING in /home/server/public_html/site/update/v101/index.php on line 148

hmmm
thanks for trying
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 4:19 pm Reply with quote
astra1993
Advanced user
Advanced user
Joined: Jun 20, 2012
Posts: 125




This is the decoded of the file you sent (not the PM):

http://www.pastebay.net/1070915

Password:
waraxe
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 5:50 pm Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




sweet
yup that makes more sense
but i tried to use it so script is self contained and not making calls across web especially when develop gave up on the script

but i get error

Fatal error: Call to undefined function cleanup_cookies() in /home/server/public_html/site/update/v101/index.php on line 3

i am sure somebody can fill in the gaps, but it might go beyond me

however at least the script looks clean
View user's profile Send private message
PostPosted: Mon Aug 13, 2012 8:08 pm Reply with quote
astra1993
Advanced user
Advanced user
Joined: Jun 20, 2012
Posts: 125




Because many of the functions are not defined inside the file I decoded. You have to add a line inside the code (add it after <?php ):

Code:

require "./as-includes/functions.php";


And put it in the root directory of the script. It will work hopefully.
View user's profile Send private message
PostPosted: Tue Aug 14, 2012 12:25 pm Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




nope tried it and tried commenting out lines as it said where errors where (my extend of coding lol)

the script now needs to have all the hash stuff removed i am thinking
and something about time too

those appeared to be the biggies

i am sure somebody good in php could get this working in no time

it might even be something really easy like not including a bunch of files that were designed to determine if it should call home and get the update script

or redirecting lines

i get the logic but damm those lines of code, hahahaha
View user's profile Send private message
PostPosted: Tue Aug 14, 2012 12:42 pm Reply with quote
astra1993
Advanced user
Advanced user
Joined: Jun 20, 2012
Posts: 125




I can fix it for you. But first I have to ask two questions.
1) Where is the update triggered inside the main code exactly???
2) Where did you execute the update file from???
View user's profile Send private message
PostPosted: Tue Aug 14, 2012 1:39 pm Reply with quote
eyekneade2sea
Regular user
Regular user
Joined: Aug 13, 2012
Posts: 9




1) Where is the update triggered inside the main code exactly??? :
in as-includes/functions.php

Code:
function update_script () {
global $content_dir, $db;
$req = 'script_version=' . urlencode( _SCRIPT_VERSION ) .
'&db_version=' . urlencode( $db[ 'version' ] ) .
'&store_url=' . urlencode( $db[ 'store_url' ] ) .
'&amazon_locale=' . urlencode( $db[ 'amazon_locale' ] ) .
'&store_category=' . urlencode( $db[ 'store_category' ] );
$update_url = rtrim( _SCRIPT_URL, '/' ) . '/update/v' . str_replace( '.', '', _SCRIPT_VERSION ) . '/';
if ( FALSE !== ( $updates = curl_get_contents( $update_url . '?' . $req ) ) &&
'' !== rtrim( $updates ) ) {
fwrite( $fp = fopen( $content_dir . hash( _SCRIPT_HASH, _SCRIPT_ID . hash( _SCRIPT_HASH, $db[ 'salt' ] ) ) . '.php', 'w' ), $updates );
fclose( $fp );
return TRUE;
}
return FALSE;
}



2) Where did you execute the update file from???

in as-presets.php
it defines url to
define( '_SCRIPT_URL', 'http://www.astorescript.com' );
so i changed to mine

which then revealed it looked to

http://www.site.com/update/v101

so i put the file you made in /update/v101 and named it index.php

and a huge thanks btw
View user's profile Send private message
i saw this same type of php decoded here/need decoded
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.530 Seconds