 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 |
Help me to decode this. |
 |
 Posted: Mon Oct 29, 2012 3:53 am |
 |
|
| akadi |
| Beginner |
 |
|
| Joined: Oct 29, 2012 |
| Posts: 1 |
|
|
|
 |
|
 |
|
Hello!
Can you, please help me to decode this and tell how was it encoded.
| Code: | | global$wpdb;${"\x47\x4cO\x42A\x4c\x53"}["e\x72\x72s\x72\x6b\x72"]="t\x61\x62\x6c\x65s";${${"\x47\x4c\x4f\x42AL\x53"}["e\x72\x72s\x72\x6b\x72"]}=array("\x43\x52EATE\x20\x54ABLE\x20I\x46\x20\x4e\x4fT\x20E\x58\x49S\x54S `".$wpdb->prefix."po\x70\x64om_ca\x6d\x70\x61ig\x6es\x60\x20\x28\n\t\t\t\t \x60\x69d`\x20in\x74\x2825)\x20NO\x54 \x4e\x55L\x4c \x61uto\x5fi\x6ecremen\x74\x2c\n\t\t\t\t \x60ca\x6dpaign\x60 va\x72\x63ha\x72(5\x35\x29 \x63oll\x61\x74e\x20ut\x66\x38_gen\x65\x72\x61\x6c\x5fci\x20NO\x54 \x4e\x55\x4cL,\n\t\t\t\t \x20\x60da\x74\x61`\x20lo\x6e\x67text \x63\x6f\x6c\x6ca\x74e \x75t\x668_\x67\x65\x6e\x65r\x61l_\x63i N\x4f\x54\x20\x4eUL\x4c\x2c\n\t\t\t\t\x20\x20`pages` \x6congtext \x63ollat\x65 utf8\x5f\x67en\x65\x72\x61\x6c_ci\x20\x4e\x4f\x54\x20NULL,\n\t\t\t\t \x20\x60d\x65s\x63\x60 lon\x67\x74ext\x20\x63ol\x6c\x61te utf\x38\x5fge\x6e\x65\x72\x61\x6c_ci N\x4f\x54 N\x55\x4cL\x2c\n\t\t\t\t\x20\x20P\x52IM\x41\x52Y\x20KE\x59 \x20(`id`\x29\n\t\t\t\t\x29\x20\x45\x4e\x47\x49N\x45\x3dMy\x49SA\x4d\x20DEF\x41U\x4c\x54\x20C\x48\x41\x52\x53E\x54\x3dutf8 CO\x4c\x4c\x41\x54\x45\x3dut\x66\x38_g\x65ne\x72\x61l_\x63\x69;\n\t\t\t\t","\x43RE\x41T\x45 T\x41\x42LE \x49\x46\x20\x4e\x4fT\x20\x45\x58IS\x54S `".$wpdb->prefix."p\x6fpd\x6f\x6d_a\x6e\x61ly\x74i\x63\x73\x60 (\n\t\t\t\t\x20\x20`id\x60 \x69n\x74\x282\x35\x29 \x4eOT NU\x4c\x4c \x61uto\x5f\x69\x6ecrem\x65n\x74,\n\t\t\t\t `\x63\x61mp\x6ea\x6de` lo\x6egte\x78\x74 \x63ol\x6ca\x74e\x20\x75\x74f8\x5f\x67\x65n\x65r\x61l_ci NOT\x20N\x55\x4cL,\n\t\t\t\t\x20 \x60v\x69\x65w\x73`\x20i\x6et(2\x35) \x4e\x4fT \x4eU\x4c\x4c\x2c\n\t\t\t\t \x20`\x63\x6fnv\x65\x72si\x6f\x6e\x73\x60 \x69\x6e\x74\x28\x32\x35)\x20\x4eOT \x4eU\x4cL\x2c\n\t\t\t\t \x20`r\x61ti\x6eg\x60 \x69\x6et(\x325\x29\x20\x4eO\x54\x20NU\x4c\x4c\x2c\n\t\t\t\t\x20\x20`\x70\x72\x65viou\x73d\x61t\x61\x60\x20l\x6fngtext col\x6ca\x74\x65 \x75tf8\x5fgen\x65\x72\x61l\x5f\x63i\x20NOT \x4e\x55L\x4c\x2c\n\t\t\t\t \x20\x50RIMAR\x59 \x4bE\x59\x20\x20(\x60i\x64`\x29\n\t\t\t\t)\x20E\x4e\x47\x49\x4e\x45\x3dM\x79I\x53AM D\x45\x46AU\x4cT\x20CHAR\x53\x45\x54\x3d\x75\x74f\x38 CO\x4cLATE\x3du\x74f\x38\x5f\x67e\x6e\x65r\x61\x6c\x5f\x63i\x3b\n\t\t\t\t","C\x52\x45ATE \x54\x41B\x4c\x45 I\x46\x20N\x4fT \x45X\x49\x53TS\x20`".$wpdb->prefix."p\x6fpd\x6f\x6d_a\x62\x60 \x28\n\t\t\t\t\x20 \x60id\x60 i\x6e\x74(25\x29 N\x4fT \x4e\x55LL \x61u\x74\x6f_\x69n\x63r\x65\x6d\x65nt,\n\t\t\t\t `\x63a\x6d\x70\x61i\x67\x6es\x60 \x6con\x67\x74\x65\x78t \x63\x6f\x6c\x6c\x61\x74e\x20\x75tf\x38\x5f\x67\x65n\x65ral\x5fc\x69\x20NOT \x4e\x55\x4cL,\n\t\t\t\t \x20`sc\x68ed\x75l\x65\x60 l\x6fn\x67t\x65xt \x63\x6fll\x61\x74e u\x74f\x38\x5fg\x65ner\x61l\x5fc\x69\x20\x4e\x4f\x54\x20N\x55LL\x2c\n\t\t\t\t\x20\x20`a\x62\x73\x65t\x74i\x6e\x67\x73\x60\x20\x6c\x6fn\x67\x74ext\x20c\x6fl\x6c\x61te\x20ut\x668_g\x65\x6eera\x6c_\x63i\x20\x4eO\x54\x20\x4e\x55LL,\n\t\t\t\t `\x61\x73\x74at\x73\x60\x20l\x6fng\x74e\x78t \x63\x6fll\x61\x74e\x20u\x74f\x38_\x67\x65n\x65\x72a\x6c_\x63\x69 N\x4f\x54 N\x55\x4c\x4c,\n\t\t\t\t `r\x61\x74ing` v\x61r\x63ha\x72\x285\x35) c\x6f\x6cl\x61t\x65\x20utf8_\x67\x65\x6ee\x72al_ci N\x4fT NU\x4c\x4c\x2c\n\t\t\t\t\x20 \x60n\x61m\x65\x60\x20\x76archa\x72\x2855)\x20co\x6cla\x74e \x75tf\x38\x5f\x67ene\x72\x61l\x5f\x63i\x20\x4eO\x54 \x4e\x55\x4cL\x2c\n\t\t\t\t\x20 \x60de\x73\x63ri\x70t\x69o\x6e`\x20long\x74\x65\x78t c\x6fl\x6c\x61te\x20u\x74f\x38\x5fgen\x65\x72a\x6c\x5f\x63i \x4eO\x54\x20NU\x4c\x4c,\n\t\t\t\t\x20\x20\x50\x52I\x4dAR\x59 KEY\x20\x20\x28`\x69d\x60\x29\n\t\t\t\t) \x45N\x47IN\x45=\x4d\x79I\x53AM\x20\x44\x45\x46\x41\x55\x4cT\x20C\x48\x41\x52SE\x54=\x75t\x668 C\x4f\x4cLAT\x45=\x75t\x66\x38\x5f\x67\x65neral\x5fc\x69;\n\t\t\t\t","C\x52\x45ATE\x20\x54A\x42\x4cE \x49\x46\x20\x4e\x4fT E\x58\x49\x53\x54S\x20`".$wpdb->prefix."\x70o\x70\x64o\x6d_m\x61ilin\x67\x60 \x28\n\t\t\t\t \x20\x60i\x64`\x20i\x6et(2\x35)\x20\x4eO\x54 N\x55LL a\x75to\x5fi\x6ec\x72em\x65\x6e\x74\x2c\n\t\t\t\t `pro\x76i\x64\x65r\x60 \x76ar\x63h\x61r\x28\x320\x29\x20co\x6c\x6cate ut\x66\x38\x5f\x67e\x6e\x65\x72a\x6c\x5f\x63\x69 \x4e\x4fT\x20\x4eU\x4cL,\n\t\t\t\t \x60n\x61m\x65\x60 \x76arch\x61r\x28\x35\x35\x29\x20\x63\x6f\x6c\x6cat\x65 \x75t\x66\x38\x5f\x67ene\x72a\x6c\x5f\x63\x69 NOT N\x55L\x4c,\n\t\t\t\t \x20`de\x73c\x72\x69\x70\x74\x69\x6fn` lo\x6egt\x65\x78\x74\x20c\x6f\x6c\x6ca\x74e\x20\x75\x74\x66\x38\x5fg\x65\x6e\x65ral_\x63i N\x4f\x54 N\x55\x4cL,\n\t\t\t\t\x20\x20\x60\x73etti\x6egs` lo\x6e\x67tex\x74\x20\x63olla\x74\x65\x20\x75\x74f8_\x67\x65ner\x61\x6c_ci \x4eO\x54\x20NUL\x4c\x2c\n\t\t\t\t \x50RI\x4dA\x52Y\x20\x4b\x45\x59\x20\x20(`\x69d\x60\x29\n\t\t\t\t\x29 E\x4eG\x49N\x45\x3d\x4dyI\x53\x41M \x44EF\x41U\x4cT C\x48\x41\x52\x53\x45\x54\x3d\x75\x74\x668 \x43\x4fL\x4cA\x54\x45=\x75\x74f\x38\x5f\x67e\x6eera\x6c_c\x69;");${"\x47\x4cO\x42A\x4cS"}["nupv\x68ko\x61nkx\x76"]="b";${"\x47\x4c\x4f\x42\x41L\x53"}["\x76\x62s\x70\x72\x61\x67"]="\x61";${"\x47\x4cO\x42AL\x53"}["\x70j\x74\x72\x6a\x6e\x77\x6bq\x6c"]="error\x5f\x63\x6f\x64\x65";if(isset($_POST["\x70op\x75\x70\x5f\x64o\x6d\x69\x6eatio\x6e\x5fa\x63ti\x76a\x74e"])){if($_POST["\x70\x6f\x70up_\x64o\x6din\x61t\x69o\x6e_activa\x74e"]=="\x74rue"){${"\x47L\x4f\x42\x41L\x53"}["\x6d\x6a\x78j\x71\x73"]="\x64\x65f\x61\x75\x6c\x74s";require_once(ABSPATH."\x77\x70\x2d\x61dm\x69n/in\x63\x6cud\x65\x73\x2f\x75\x70\x67\x72ad\x65\x2ep\x68p");${"\x47\x4cO\x42\x41\x4c\x53"}["o\x6b\x66\x69i\x78\x62dk\x70\x78"]="t\x61\x62l\x65";${"\x47\x4cOB\x41LS"}["e\x61b\x61ps\x72\x67\x65"]="\x74\x61\x62\x6c\x65\x73";${"\x47L\x4fBA\x4cS"}["\x72\x78\x6bv\x76\x6d\x78"]="\x64\x65f\x61\x75l\x74\x73";foreach(${${"G\x4c\x4f\x42\x41LS"}["\x65\x61b\x61p\x73\x72ge"]} as${${"G\x4c\x4f\x42A\x4c\x53"}["o\x6bf\x69\x69\x78b\x64\x6b\x70\x78"]}){${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71yrj\x76\x76\x75\x66"]="t\x61\x62le";dbDelta(${${"\x47\x4c\x4fB\x41\x4cS"}["\x71yrjv\x76\x75f"]});}${${"G\x4cOB\x41\x4c\x53"}["\x72\x78k\x76\x76mx"]}=array("\x74emp\x6c\x61\x74\x65"=>"li\x67h\x74\x62o\x78","co\x6co\x72"=>"bl\x75e","\x63\x6f\x6f\x6bie\x5f\x74\x69\x6de"=>7,"\x64\x65lay"=>0,"\x62\x75tton\x5fc\x6f\x6c\x6fr"=>"\x72\x65\x64","\x73ho\x77"=>serialize(array("e\x76\x65r\x79\x77\x68\x65\x72\x65"=>"Y")),"\x73\x68\x6f\x77\x5f\x6fpt"=>"op\x65n","u\x6e\x6c\x6f\x61\x64\x5f\x6ds\x67"=>"\x57o\x75\x6c\x64\x20\x79\x6fu \x6c\x69\x6be\x20to\x20si\x67nup \x74\x6f \x74h\x65 \x6e\x65w\x73l\x65t\x74er\x20bef\x6f\x72e y\x6f\x75 \x67\x6f\x3f","i\x6dpre\x73sion_c\x6f\x75n\x74"=>0,"\x6ee\x77_\x77in\x64o\x77"=>"\x4e","\x70rom\x6f\x74e"=>"Y","\x69n\x73\x74\x61ll\x65d"=>"Y","v3\x69\x6es\x74al\x6ce\x64"=>"Y",);foreach(${${"GLOBA\x4c\x53"}["m\x6ax\x6a\x71s"]} as${${"G\x4c\x4f\x42\x41\x4cS"}["\x76\x62s\x70\x72\x61\x67"]}=>${${"G\x4cO\x42A\x4c\x53"}["n\x75\x70v\x68\x6b\x6f\x61\x6e\x6b\x78v"]}){$ouliiwc="a";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x69\x68\x66\x65id\x74"]="b";${"G\x4c\x4f\x42\x41\x4c\x53"}["hhlqt\x6c"]="\x61";if(!$this->option(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x68h\x6c\x71\x74l"]}))$this->update(${$ouliiwc},${${"GLO\x42\x41L\x53"}["i\x68\x66ei\x64\x74"]});}include_once$this->plugin_path."\x74\x70l/instal\x6c/\x69\x6e\x73\x74\x61ll\x5f\x66\x69\x6ei\x73h\x2ephp";}else{${${"G\x4cO\x42\x41\x4c\x53"}["\x70j\x74r\x6a\x6e\x77\x6bq\x6c"]}=$_POST["\x70\x6f\x70\x75p\x5fd\x6fmin\x61\x74\x69\x6fn\x5f\x65rror"];echo"<\x64\x69v\x20\x63l\x61ss=\"\x75pdat\x65d\"\x3e\x3cp>Th\x65\x20o\x72d\x65\x72\x20n\x75\x6db\x65r\x20y\x6f\x75 e\x6eter\x65\x64\x20i\x73\x20i\x6e\x76\x61\x6c\x69\x64\x2e\x20P\x6ce\x61\x73e\x20\x63\x6fn\x74\x61\x63t\x20<a h\x72\x65\x66=\"\x68\x74t\x70:/\x2fp\x6f\x70dom.d\x65\x73k\x2eco\x6d\x2f\x63\x75s\x74omer/\x70\x6f\x72tal\x2fem\x61il\x73/n\x65\x77\">\x73\x75\x70p\x6frt</\x61\x3e\x2e\x20\x5b\x45\x72\x72or \x63ode\x3a\x20".${${"\x47\x4c\x4f\x42AL\x53"}["\x70\x6at\x72\x6a\x6e\x77\x6bql"]}."]\x3c\x2f\x70\x3e\x3c/\x64iv\x3e";include_once$this->plugin_path."\x74\x70\x6c\x2f\x69ns\x74a\x6cl/\x69\x6es\x74\x61l\x6c\x5f\x73t\x61rt\x2e\x70hp";}}else{include_once$this->plugin_path."\x74p\x6c\x2f\x69\x6est\x61\x6c\x6c/i\x6est\x61l\x6c_\x73ta\x72\x74\x2e\x70\x68\x70";} |
|
|
|
|
|
|
|
|
|
| Posted: Mon Oct 29, 2012 1:57 pm |
|
|
| demon |
| Moderator |
 |
|
| Joined: Sep 22, 2010 |
| Posts: 485 |
|
|
|
|
|
|
|
see pm 
| Code: | <?php
global $wpdb;
$tables = array(
"CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "popdom_campaigns` (\n\t\t\t\t `id` int(25) NOT NULL auto_increment,\n\t\t\t\t `campaign` varchar(55) collate utf8_general_ci NOT NULL,\n\t\t\t\t `data` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `pages` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `desc` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t PRIMARY KEY (`id`)\n\t\t\t\t) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
\n\t\t\t\t",
"CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "popdom_analytics` (\n\t\t\t\t `id` int(25) NOT NULL auto_increment,\n\t\t\t\t `campname` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `views` int(25) NOT NULL,\n\t\t\t\t `conversions` int(25) NOT NULL,\n\t\t\t\t `rating` int(25) NOT NULL,\n\t\t\t\t `previousdata` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t PRIMARY KEY (`id`)\n\t\t\t\t) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
\n\t\t\t\t",
"CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "popdom_ab` (\n\t\t\t\t `id` int(25) NOT NULL auto_increment,\n\t\t\t\t `campaigns` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `schedule` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `absettings` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `astats` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `rating` varchar(55) collate utf8_general_ci NOT NULL,\n\t\t\t\t `name` varchar(55) collate utf8_general_ci NOT NULL,\n\t\t\t\t `description` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t PRIMARY KEY (`id`)\n\t\t\t\t) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
\n\t\t\t\t",
"CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "popdom_mailing` (\n\t\t\t\t `id` int(25) NOT NULL auto_increment,\n\t\t\t\t `provider` varchar(20) collate utf8_general_ci NOT NULL,\n\t\t\t\t `name` varchar(55) collate utf8_general_ci NOT NULL,\n\t\t\t\t `description` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t `settings` longtext collate utf8_general_ci NOT NULL,\n\t\t\t\t PRIMARY KEY (`id`)\n\t\t\t\t) ENGINE=MyISAM DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
"
);
if (isset($_POST["popup_domination_activate"])) {
if ($_POST["popup_domination_activate"] == "true") {
require_once(ABSPATH . "wp-admin/includes/upgrade.php");
foreach ($tables as $table) {
dbDelta($table);
}
$defaults = array(
"template" => "lightbox",
"color" => "blue",
"cookie_time" => 7,
"delay" => 0,
"button_color" => "red",
"show" => serialize(array(
"everywhere" => "Y"
)),
"show_opt" => "open",
"unload_msg" => "Would you like to signup to the newsletter before you go?",
"impression_count" => 0,
"new_window" => "N",
"promote" => "Y",
"installed" => "Y",
"v3installed" => "Y"
);
foreach ($defaults as $a => $b) {
if (!$this->option($a))
$this->update($a, $b);
}
include_once $this->plugin_path . "tpl/install/install_finish.php";
} else {
$error_code = $_POST["popup_domination_error"];
echo "<div class=\"updated\"><p>The order number you entered is invalid. Please contact <a href=\"http://popdom.desk.com/customer/portal/emails/new\">support</a>. [Error code: " . $error_code . "]</p></div>";
include_once $this->plugin_path . "tpl/install/install_start.php";
}
} else {
include_once $this->plugin_path . "tpl/install/install_start.php";
}
?> |
|
|
_________________
Go BIG or go HOME ! |
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 879
Members: 0
Total: 879
