Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml..

Decoded Output download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> 
<title>Less-61:Challenge-8</title> 
</head> 
 
<body bgcolor="#000000"> 
<div style ="text-align:right"> 
<form action="" method="post"> 
<input  type="submit" name="reset" value="Reset the Challenge!" /> 
</form> 
</div> 
</right> 
<div style=" margin-top:20px;color:#FFF; font-size:23px; text-align:center">Welcome&nbsp;&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br> 
<font size="3" color="#FFFF00"> 
 
 
 
<?php 
//including the Mysql connect parameters. 
include '../sql-connections/sql-connect-1.php'; 
include '../sql-connections/functions.php'; 
error_reporting(0); 
$pag = $_SERVER['PHP_SELF']; //generating page address to piggy back after redirects... 
$characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; //characterset for generating random data 
$times= 5; 
$table = table_name(); 
$col = column_name(1);     // session id column name 
$col1 = column_name(2);   //secret key column name 
 
 
// Submitting the final answer 
if(!isset($_POST['answer_key'])) 
{ 
	// resetting the challenge and repopulating the table . 
	if(isset($_POST['reset'])) 
	{ 
		setcookie('challenge', ' ', time() - 3600000); 
		echo "<font size=4>You have reset the Challenge</font><br>
"; 
		echo "Redirecting you to main challenge page..........
"; 
		header( "refresh:4;url=../sql-connections/setup-db-challenge.php?id=$pag" ); 
		//echo "cookie expired"; 
			 
	} 
	else 
	{ 
		// Checking the cookie on the page and populate the table with random value. 
		if(isset($_COOKIE['challenge'])) 
		{ 
			$sessid=$_COOKIE['challenge']; 
			//echo "Cookie value: ".$sessid; 
		} 
		else 
		{ 
			$expire = time()+60*60*24*30; 
			$hash = data($table,$col); 
			setcookie("challenge", $hash, $expire); 
			 
		} 
	 
		echo "<br>
"; 
	 
		// take the variables 
		if(isset($_GET['id'])) 
		{ 
			$id=$_GET['id']; 
	 
			//logging the connection parameters to a file for analysis. 
			$fp=fopen('result.txt','a'); 
			fwrite($fp,'ID:'.$id."
"); 
			fclose($fp); 
	 
			 
			//update the counter in database 
			next_tryy(); 
			 
			//Display attempts on screen. 
			$tryyy = view_attempts(); 
			echo "You have made : ". $tryyy ." of $times attempts"; 
			echo "<br><br><br>
"; 
		 
			 
			//Reset the Database if you exceed allowed attempts. 
			if($tryyy >= ($times+1)) 
			{ 
				setcookie('challenge', ' ', time() - 3600000); 
				echo "<font size=4>You have exceeded maximum allowed attempts, Hence Challenge Has Been Reset </font><br>
"; 
				echo "Redirecting you to challenge page..........
"; 
				header( "refresh:3;url=../sql-connections/setup-db-challenge.php?id=$pag" ); 
				echo "<br>
"; 
			}	 
		 
		 
			 
			// Querry DB to get the correct output 
			$sql="SELECT * FROM security.users WHERE id=(('$id')) LIMIT 0,1"; 
			$result=mysql_query($sql); 
			$row = mysql_fetch_array($result); 
 
			if($row) 
			{ 
				echo '<font color= "#00FFFF">';	 
				$unames=array("Dumb","Angelina","Dummy","secure","stupid","superman","batman","admin","admin1","admin2","admin3","dhakkan","admin4"); 
				$pass = array_reverse($unames); 
				echo 'Your Login name : '. $unames[$row['id']]; 
				echo "<br>"; 
				echo 'Your Password : ' .$pass[$row['id']]; 
				echo "</font>"; 
			} 
			else  
			{ 
				echo '<font color= "#FFFF00">'; 
				print_r(mysql_error()); 
				echo "</font>";   
			} 
		} 
		else 
		{ 
			echo "Please input the ID as parameter with numeric value as done in  Lab excercises
<br><br>
</font>"; 
			echo "<font color='#00FFFF': size=3>The objective of this challenge is to dump the <b>(secret key)</b> from only random table from Database <b><i>('CHALLENGES')</i></b> in Less than $times attempts<br>"; 
			echo "For fun, with every reset, the challenge spawns random table name, column name, table data. Keeping it fresh at all times.<br>" ; 
		} 
	 
	} 
	 
 
?> 
</font> </div></br></br></br><center> 
<img src="../images/Less-61.jpg" /> 
</center> 
<br><br><br> 
<div  style=" color:#00FFFF; font-size:18px; text-align:center"> 
<form name="input" action="" method="post"> 
Submit Secret Key: <input type="text" name="key"> 
<input type="submit" name = "answer_key" value="Submit"> 
</form>  
</div> 
 
 
<?php 
 
} 
 
else 
{ 
	echo '<div  style=" color:#00FFFF; font-size:18px; text-align:center">'; 
	$key = addslashes($_POST['key']); 
	$key = mysql_real_escape_string($key); 
	//echo $key; 
	//Query table to verify your result 
	$sql="SELECT 1 FROM $table WHERE $col1= '$key'"; 
	//echo "$sql"; 
	$result=mysql_query($sql)or die("error in submittion of Key Solution".mysql_error()); 
	  
	$row = mysql_fetch_array($result); 
	 
	if($row) 
	{ 
		echo '<font color= "#FFFF00">'; 
		echo "
<br><br><br>"; 
		echo '<img src="../images/Less-54-1.jpg" />'; 
		echo "</font>";  
		header( "refresh:4;url=../sql-connections/setup-db-challenge.php?id=$pag" );	 
	} 
	else  
	{ 
		echo '<font color= "#FFFF00">'; 
		echo "
<br><br><br>"; 
		echo '<img src="../images/slap1.jpg" />'; 
		header( "refresh:3;url=index.php" ); 
		//print_r(mysql_error()); 
		echo "</font>";   
			}	 
 
 
} 
 
?> 
 
</body> 
</html>

Did this file decode correctly?

Original Code

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Less-61:Challenge-8</title>
</head>

<body bgcolor="#000000">
<div style ="text-align:right">
<form action="" method="post">
<input  type="submit" name="reset" value="Reset the Challenge!" />
</form>
</div>
</right>
<div style=" margin-top:20px;color:#FFF; font-size:23px; text-align:center">Welcome&nbsp;&nbsp;&nbsp;<font color="#FF0000"> Dhakkan </font><br>
<font size="3" color="#FFFF00">



<?php
//including the Mysql connect parameters.
include '../sql-connections/sql-connect-1.php';
include '../sql-connections/functions.php';
error_reporting(0);
$pag = $_SERVER['PHP_SELF']; //generating page address to piggy back after redirects...
$characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; //characterset for generating random data
$times= 5;
$table = table_name();
$col = column_name(1);     // session id column name
$col1 = column_name(2);   //secret key column name


// Submitting the final answer
if(!isset($_POST['answer_key']))
{
	// resetting the challenge and repopulating the table .
	if(isset($_POST['reset']))
	{
		setcookie('challenge', ' ', time() - 3600000);
		echo "<font size=4>You have reset the Challenge</font><br>\n";
		echo "Redirecting you to main challenge page..........\n";
		header( "refresh:4;url=../sql-connections/setup-db-challenge.php?id=$pag" );
		//echo "cookie expired";
			
	}
	else
	{
		// Checking the cookie on the page and populate the table with random value.
		if(isset($_COOKIE['challenge']))
		{
			$sessid=$_COOKIE['challenge'];
			//echo "Cookie value: ".$sessid;
		}
		else
		{
			$expire = time()+60*60*24*30;
			$hash = data($table,$col);
			setcookie("challenge", $hash, $expire);
			
		}
	
		echo "<br>\n";
	
		// take the variables
		if(isset($_GET['id']))
		{
			$id=$_GET['id'];
	
			//logging the connection parameters to a file for analysis.
			$fp=fopen('result.txt','a');
			fwrite($fp,'ID:'.$id."\n");
			fclose($fp);
	
			
			//update the counter in database
			next_tryy();
			
			//Display attempts on screen.
			$tryyy = view_attempts();
			echo "You have made : ". $tryyy ." of $times attempts";
			echo "<br><br><br>\n";
		
			
			//Reset the Database if you exceed allowed attempts.
			if($tryyy >= ($times+1))
			{
				setcookie('challenge', ' ', time() - 3600000);
				echo "<font size=4>You have exceeded maximum allowed attempts, Hence Challenge Has Been Reset </font><br>\n";
				echo "Redirecting you to challenge page..........\n";
				header( "refresh:3;url=../sql-connections/setup-db-challenge.php?id=$pag" );
				echo "<br>\n";
			}	
		
		
			
			// Querry DB to get the correct output
			$sql="SELECT * FROM security.users WHERE id=(('$id')) LIMIT 0,1";
			$result=mysql_query($sql);
			$row = mysql_fetch_array($result);

			if($row)
			{
				echo '<font color= "#00FFFF">';	
				$unames=array("Dumb","Angelina","Dummy","secure","stupid","superman","batman","admin","admin1","admin2","admin3","dhakkan","admin4");
				$pass = array_reverse($unames);
				echo 'Your Login name : '. $unames[$row['id']];
				echo "<br>";
				echo 'Your Password : ' .$pass[$row['id']];
				echo "</font>";
			}
			else 
			{
				echo '<font color= "#FFFF00">';
				print_r(mysql_error());
				echo "</font>";  
			}
		}
		else
		{
			echo "Please input the ID as parameter with numeric value as done in  Lab excercises\n<br><br>\n</font>";
			echo "<font color='#00FFFF': size=3>The objective of this challenge is to dump the <b>(secret key)</b> from only random table from Database <b><i>('CHALLENGES')</i></b> in Less than $times attempts<br>";
			echo "For fun, with every reset, the challenge spawns random table name, column name, table data. Keeping it fresh at all times.<br>" ;
		}
	
	}
	

?>
</font> </div></br></br></br><center>
<img src="../images/Less-61.jpg" />
</center>
<br><br><br>
<div  style=" color:#00FFFF; font-size:18px; text-align:center">
<form name="input" action="" method="post">
Submit Secret Key: <input type="text" name="key">
<input type="submit" name = "answer_key" value="Submit">
</form> 
</div>


<?php

}

else
{
	echo '<div  style=" color:#00FFFF; font-size:18px; text-align:center">';
	$key = addslashes($_POST['key']);
	$key = mysql_real_escape_string($key);
	//echo $key;
	//Query table to verify your result
	$sql="SELECT 1 FROM $table WHERE $col1= '$key'";
	//echo "$sql";
	$result=mysql_query($sql)or die("error in submittion of Key Solution".mysql_error());
	 
	$row = mysql_fetch_array($result);
	
	if($row)
	{
		echo '<font color= "#FFFF00">';
		echo "\n<br><br><br>";
		echo '<img src="../images/Less-54-1.jpg" />';
		echo "</font>"; 
		header( "refresh:4;url=../sql-connections/setup-db-challenge.php?id=$pag" );	
	}
	else 
	{
		echo '<font color= "#FFFF00">';
		echo "\n<br><br><br>";
		echo '<img src="../images/slap1.jpg" />';
		header( "refresh:3;url=index.php" );
		//print_r(mysql_error());
		echo "</font>";  
			}	


}

?>

</body>
</html>

Function Calls

None

Variables

None

Stats

MD5	87c435ed57378df4a6ca327aaed2d7fe
Eval Count	0
Decode Time	139 ms

Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

Decoded Output download

Did this file decode correctly?

How would you describe this file?

Original Code

Function Calls

Variables

Stats