Waraxe IT Security Portal

:: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools ::

August 19, 2026

Menu

Home

Logout

Discussions

	Forums
	Members List
	IRC chat

Tools

	Base64 coder
	MD5 hash
	CRC32 checksum
	ROT13 coder
	SHA-1 hash
	URL-decoder
	Sql Char Encoder

Affiliates

	y3dips ITsec
	Md5 Cracker
	User Manuals
	AlbumNow

Content

	Content
	Sections
	FAQ
	Top

Info

	Feedback
	Recommend Us
	Search
	Journal
	Your Account

User Info

Membership:

Latest: MichaelSnaRe

New Today: 0

New Yesterday: 0

Overall: 9144

People Online:

Visitors: 340

Members: 0

Total: 340

Full disclosure

IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Php -> Decode this please
	View previous topic :: View next topic

Decode this please

Posted: Sun Sep 30, 2012 8:33 am

sarvnaa

Beginner

Joined: Sep 30, 2012

Posts: 4

Help me to decode this please

http://pastebin.com/Z4vw1mmH

Posted: Sun Sep 30, 2012 9:18 am

demon

Moderator

Joined: Sep 22, 2010

Posts: 485

the variables are obfuscated by phplockit but the script will work fine Wink

Code:

<?php

require_once('config.php');
require_once "article.php";
if (defined('CONFIG_AUTO_LONGTAIL') === false) {
define("CONFIG_AUTO_LONGTAIL", false);
}
define("ELITE_MINLEN_URL", 10);
define("ELITE_KEYWORD_URL", "http://seo.elite-school.com/kw.php/");
define("ELITE_AD_URL", "http://seo.elite-school.com/ad.php/");
define("ELITE_LONGTAIL_URL", "http://seo.elite-school.com/lt.php/");
define("ELITE_JAVASCRIPT_URL", "http://seo.elite-school.com/js.php/");
define("ELITE_KEYWORD_HEADER", "ELITERSSPORTALv2");
define("ELITE_MS_TRANSLATE_ID", "DCE7F3A097D938F2DAFD3D10F0779E2FCEE53A67");
define("ELITE_MS_TRANSLATE_URL", "http://api.microsofttranslator.com/V2/Http.svc/Translate");
define("ELITE_GOOGLE_TRANSLATE_URL", "http://translate.google.com/translate_a/t?client=t&text=");
define("ELITE_GOOGLE_TRANSLATE_HEADER", "[\"");
define("ELITE_GOOGLE_TRANSLATE_TAIL", "\",\"");
define("ELITE_IE_USER_AGENT", "Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)");
define("ELITE_YAHOO_TRANSLATE_URL", "http://babelfish.yahoo.com/translate_txt");
define("TRANSFORM_NONE", 0);
define("TRANSFORM_REPLACE", 1);
define("TRANSFORM_MICROSOFT", 2);
define("TRANSFORM_GOOGLE", 3);
define("TRANSFORM_YAHOO", 4);
define("TRANSFORM_KEYWORD_COUNT", 3);
define("TPL_REPLACE_TXT", "tpl/replace.txt");
define("TPL_KEYWORD_TXT", "tpl/keyword.txt");
define("TPL_LONGTAIL_TXT", "tpl/longtail.txt");
function IIIIIII11I1l($IIIIIIIIl1I1, $lang)
{
error_reporting(0);
$url = ELITE_MS_TRANSLATE_URL . "?appId=" . ELITE_MS_TRANSLATE_ID . "&from=" . $lang . "&to=" . CONFIG_LANG . "&text=";
$IIIIIIIIl1II = $GLOBALS['IIIIIIIIIIlI']($url . $GLOBALS['IIIIIII1lI1I']($IIIIIIIIl1I1));
if ($IIIIIIIIl1II === FALSE) {
$text = "";
} else {
$text = $GLOBALS['IIIIIIIIIII1']('', $IIIIIIIIl1II);
}
return $GLOBALS['IIIIIIIIl1ll'](IIIIIIII1lll($text));
}
function IIIIIII11I11()
{
return function_exists("curl_init");
}
function IIIIIII11lII($IIIIIIIIl1I1, $lang)
{
error_reporting(0);
if (IIIIIII11I11() === false) {
return false;
}
if (CONFIG_LANG == "zh-CHS") {
$IIIIIII11lIl = "zh_CN";
} else {
$IIIIIII11lIl = "en";
}
$url = ELITE_GOOGLE_TRANSLATE_URL . $GLOBALS['IIIIIII1lI1I']($IIIIIIIIl1I1) . "&sl=" . $lang . "&tl=" . $IIIIIII11lIl;
$IIIIIII11lI1 = $GLOBALS['IIIIIII11llI']();
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_URL, $url);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_RETURNTRANSFER, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_HEADER, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_MUTE, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_USERAGENT, ELITE_IE_USER_AGENT);
$IIIIIII11ll1 = $GLOBALS['IIIIIII11l1I']($IIIIIII11lI1);
$GLOBALS['IIIIIII11l1l']($IIIIIII11lI1);
$IIIIIIIIl1II = $GLOBALS['IIIIIIII1111'](ELITE_GOOGLE_TRANSLATE_HEADER, $IIIIIII11ll1);
$text = "";
if ($IIIIIIIIl1II !== FALSE) {
foreach ($IIIIIIIIl1II as $id => $IIIIIIIIl1I1) {
if ($id == 0) {
continue;
}
$IIIIIIII1l1I = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIl1I1, ELITE_GOOGLE_TRANSLATE_TAIL);
if ($IIIIIIII1l1I !== false) {
$text .= $GLOBALS['IIIIIIII1Il1']($IIIIIIIIl1I1, 0, $IIIIIIII1l1I);
}
}
}
return $GLOBALS['IIIIIIIIl1ll']($text);
}
function IIIIIII11l11($IIIIIIIIl1I1, $lang)
{
if (CONFIG_LANG != "zh-CHS") {
return $IIIIIIIIl1I1;
}
error_reporting(0);
$IIIIIII111II = array(
'ei' => 'UTF-8',
'doit' => 'done',
'fr' => 'bf-res',
'intl' => '1',
'tt' => 'urltext',
'lp' => "en_zh",
'trtext' => ($IIIIIIIIl1I1)
);
$IIIIIII11lI1 = $GLOBALS['IIIIIII11llI']();
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_URL, ELITE_YAHOO_TRANSLATE_URL);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_RETURNTRANSFER, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_MUTE, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_USERAGENT, ELITE_IE_USER_AGENT);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_POST, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_POSTFIELDS, $IIIIIII111II);
$IIIIIIIIIIIl = $GLOBALS['IIIIIII11l1I']($IIIIIII11lI1);
$GLOBALS['IIIIIII11l1l']($IIIIIII11lI1);
$IIIIIII111Il = "<div id=\"result\">";
$IIIIIII111I1 = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIIIIl, $IIIIIII111Il);
if ($IIIIIII111I1 !== false) {
$IIIIIIIIIIIl = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIIIIl, $IIIIIII111I1 + strlen($IIIIIII111Il));
$IIIIIII111lI = "</div>";
$IIIIIIII11I1 = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIIIIl, $IIIIIII111lI);
if ($IIIIIIII11I1 !== false) {
$IIIIIIIIIIIl = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIIIIl, 0, $IIIIIIII11I1);
}
} else {
$IIIIIIIIIIIl = "";
}
return strip_tags($IIIIIIIIIIIl);
}
function transform_replace($text)
{
$IIIIIII111l1 = $GLOBALS['IIIIIIIIIIlI'](TPL_REPLACE_TXT);
$IIIIIII1111I = array();
foreach ($IIIIIII111l1 as $IIIIIIIIl1I1) {
$IIIIIIII1l1I = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIl1I1, "=");
if ($IIIIIIII1l1I !== false) {
$IIIIIII1111l = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIl1I1, 0, $IIIIIIII1l1I);
$IIIIIII11111 = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIl1I1, $IIIIIIII1l1I + 1);
$IIIIIII1111I[$IIIIIII1111l] = $IIIIIII11111;
}
}
return str_replace($GLOBALS['IIIIIIlIIIII']($IIIIIII1111I), $GLOBALS['IIIIIIlIIIIl']($IIIIIII1111I), $text);
}
function IIIIIIlIIII1($text)
{
error_reporting(0);
$IIIIIIlIIIlI = array();
$IIIIIIIIl1II = $GLOBALS['IIIIIIIIIIlI'](ELITE_KEYWORD_URL . CONFIG_LANG);
if ($IIIIIIIIl1II !== false) {
$IIIIIIlIIIll = false;
foreach ($IIIIIIIIl1II as $IIIIIIIIl1I1) {
if ($IIIIIIlIIIll === false) {
$IIIIIIII1l1I = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIl1I1, ELITE_KEYWORD_HEADER);
if ($IIIIIIII1l1I !== false) {
$IIIIIIlIIIll = true;
continue;
}
}
if ($IIIIIIlIIIll && (strlen($IIIIIIIIl1I1) > ELITE_MINLEN_URL)) {
$IIIIIIII1l1I = $GLOBALS['IIIIIIII1Ill']($IIIIIIIIl1I1, ",");
if ($IIIIIIII1l1I === false) {
continue;
}
$IIIIIIlIIIl1 = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIl1I1, 0, $IIIIIIII1l1I);
$IIIIIIlIII1I = $GLOBALS['IIIIIIII1Il1']($IIIIIIIIl1I1, $IIIIIIII1l1I + 1);
$IIIIIIlIIIlI[$IIIIIIlIIIl1] = "<a href='$IIIIIIlIII1I'>$IIIIIIlIIIl1</a>";
}
}
if ($IIIIIIlIIIll) {
return str_replace($GLOBALS['IIIIIIlIIIII']($IIIIIIlIIIlI), $GLOBALS['IIIIIIlIIIIl']($IIIIIIlIIIlI), $text);
}
}
$IIIIIIlIII1l = "<a href='http://seo.elite-school.com/'>SEO</a>" . "<a href='http://www.elite-school.com/'>åŸ¹è®</a>" . "<a href='http://china.elite-school.com/'>è½¯ä»¶</a>" . "<a href='http://usa.elite-school.com/'>software</a>" . "<a href='http://research.elite-school.com/'>consult</a>";
return $text . $IIIIIIlIII1l;
}
function IIIIIIlIII11($IIIIIIIIlIlI, $text)
{
error_reporting(0);
$IIIIIIIIl1II = $GLOBALS['IIIIIIIIIIlI'](ELITE_AD_URL . CONFIG_LANG . "." . $IIIIIIIIlIlI . "." . $_SERVER['SERVER_NAME']);
if ($IIIIIIIIl1II !== false) {
return $text . $GLOBALS['IIIIIIIIIII1']('', $IIIIIIIIl1II);
} else {
$IIIIIIlIII1l = "<a href='http://seo.elite-school.com/'>SEO</a>" . "<a href='http://www.elite-school.com/'>åŸ¹è®</a>" . "<a href='http://china.elite-school.com/'>è½¯ä»¶</a>" . "<a href='http://usa.elite-school.com/'>software</a>" . "<a href='http://research.elite-school.com/'>consult</a>";
return $text . $IIIIIIlIII1l;
}
}
function IIIIIIlIIlII($type, $IIIIIIIIl1I1, $lang)
{
if ($type == TRANSFORM_NONE) {
return $GLOBALS['IIIIIIIIl1ll']($IIIIIIIIl1I1);
}
if ($type == TRANSFORM_REPLACE) {
return transform_replace($IIIIIIIIl1I1);
}
if ($type == TRANSFORM_MICROSOFT) {
return IIIIIII11I1l($IIIIIIIIl1I1, $lang);
}
if ($type == TRANSFORM_GOOGLE) {
return IIIIIII11lII($IIIIIIIIl1I1, $lang);
}
if ($type == TRANSFORM_YAHOO) {
return IIIIIII11l11($IIIIIIIIl1I1, $lang);
}
}
function IIIIIIlIIlIl($text)
{
error_reporting(0);
$IIIIIIlIIlI1 = $GLOBALS['IIIIIIIIIIlI'](TPL_KEYWORD_TXT);
$IIIIIIlIIllI = array();
foreach ($IIIIIIlIIlI1 as $IIIIIIlIIIl1) {
$IIIIIIlIIIl1 = $GLOBALS['IIIIIIIIl1ll']($IIIIIIlIIIl1);
if (strlen($IIIIIIlIIIl1) > 0) {
$IIIIIIIl1111 = $GLOBALS['IIIIIIlIIlll']($text, $IIIIIIlIIIl1);
if ($IIIIIIIl1111 > 0) {
$IIIIIIlIIllI[$IIIIIIlIIIl1] = $IIIIIIIl1111;
}
}
}
$GLOBALS['IIIIIIlIIll1']($IIIIIIlIIllI, SORT_NUMERIC);
return $IIIIIIlIIllI;
}
function IIIIIIlIIl1I($text, $IIIIIIIIlIl1)
{
$IIIIIIIl1111 = 0;
$IIIIIIlIIlI1 = "";
foreach ($IIIIIIIIlIl1 as $IIIIIIlIIIl1 => $IIIIIIlIIl1l) {
$IIIIIIIl1111 = $IIIIIIIl1111 + 1;
if (CONFIG_AUTO_LONGTAIL) {
$IIIIIIlIIl11 = transform_get_longtail($IIIIIIlIIIl1);
} else {
$IIIIIIlIIl11 = $IIIIIIlIIIl1;
}
if ($IIIIIIIl1111 <= TRANSFORM_KEYWORD_COUNT) {
if ($IIIIIIIl1111 <= 1) {
$IIIIIIlIIlI1 .= "Keyword: {$IIIIIIlIIl11}";
} else {
$IIIIIIlIIlI1 .= ", {$IIIIIIlIIl11}";
}
$text = str_replace($IIIIIIlIIIl1, "$IIIIIIlIIl11", $text);
} else {
break;
}
}
if (strlen($IIIIIIlIIlI1) > 10) {
return "$IIIIIIlIIlI1$text";
} else {
return $text;
}
}
function IIIIIIlII1II($url)
{
error_reporting(0);
$IIIIIII11lI1 = $GLOBALS['IIIIIII11llI']();
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_URL, $url);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_RETURNTRANSFER, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_MUTE, true);
$GLOBALS['IIIIIII11lll']($IIIIIII11lI1, CURLOPT_USERAGENT, ELITE_IE_USER_AGENT);
$IIIIIIIIIIIl = $GLOBALS['IIIIIII11l1I']($IIIIIII11lI1);
$GLOBALS['IIIIIII11l1l']($IIIIIII11lI1);
return $IIIIIIIIIIIl;
}
function IIIIIIlII1Il()
{
$GLOBALS['IIIIIII1I111'](true);
$GLOBALS['IIIIIII1lIII'](0);
error_reporting(0);
$code = file_get_contents(ELITE_LONGTAIL_URL . CONFIG_LANG);
eval($code);
$IIIIIIlIIlI1 = $GLOBALS['IIIIIIIIIIlI'](TPL_KEYWORD_TXT);
$lt = $GLOBALS['IIIIIII1llIl'](TPL_LONGTAIL_TXT, "w");
foreach ($IIIIIIlIIlI1 as $IIIIIIlIIIl1) {
$IIIIIIlIIIl1 = $GLOBALS['IIIIIIIIl1ll']($IIIIIIlIIIl1);
if (strlen($IIIIIIlIIIl1) > 0) {
$IIIIIIIlll11 = transform_find_longtail($IIIIIIlIIIl1);
$GLOBALS['IIIIIII1I1Il']($lt, "$IIIIIIlIIIl1|$IIIIIIIlll11\r\n");
}
}
$GLOBALS['IIIIIII1I1ll']($lt);
}
function transform_get_longtail($IIIIIIlIIIl1)
{
$IIIIIIIIl1II = $GLOBALS['IIIIIIIIIIlI'](TPL_LONGTAIL_TXT);
if ($IIIIIIIIl1II === false) {
return $IIIIIIlIIIl1;
}
foreach ($IIIIIIIIl1II as $IIIIIIIIl1I1) {
$IIIIIIIIl1I1 = $GLOBALS['IIIIIIIIl1ll']($IIIIIIIIl1I1);
if (strlen($IIIIIIIIl1I1) > 0) {
$IIIIIIlIIlI1 = $GLOBALS['IIIIIIII1111']('|', $IIIIIIIIl1I1);
if ($IIIIIIlIIlI1[0] == $IIIIIIlIIIl1) {
$id = $GLOBALS['IIIIIIllllll'](1, $GLOBALS['IIIIIIlllll1']($IIIIIIlIIlI1) - 2);
return $IIIIIIlIIlI1[$id];
}
}
}
return $IIIIIIlIIIl1;
}
?>

_________________
Go BIG or go HOME !

Decode this please

www.waraxe.us Forum Index -> Php

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

All times are GMT
Page 1 of 1

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.029 Seconds