wiseguy Posted October 28, 2006 Share Posted October 28, 2006 Can anyone decode this? I've tried base64 decoders with no luck.[code]$pageval = "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";eval(stripslashes(gzuncompress(base64_decode($pageval))));[/code] Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/ Share on other sites More sharing options...
freeloader Posted October 28, 2006 Share Posted October 28, 2006 Md5? If it is md5, you can't decode it. Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-115775 Share on other sites More sharing options...
wiseguy Posted October 28, 2006 Author Share Posted October 28, 2006 I don't think it's md5 as this is an encoded php page. Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-115975 Share on other sites More sharing options...
brendandonhue Posted October 28, 2006 Share Posted October 28, 2006 The script tells you the functions to decode it...http://wizardsofwebsites.com/script.txt Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-115986 Share on other sites More sharing options...
wiseguy Posted October 28, 2006 Author Share Posted October 28, 2006 [quote author=brendandonhue link=topic=113017.msg459199#msg459199 date=1162062666]The script tells you the functions to decode it...http://wizardsofwebsites.com/script.txt[/quote]Thanks, but I know virtually nothing about PHP so this really doesn't do me any good. Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-115998 Share on other sites More sharing options...
brendandonhue Posted October 28, 2006 Share Posted October 28, 2006 You asked to decode the script, that's the decoded script. What else did you need? Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116002 Share on other sites More sharing options...
wiseguy Posted October 28, 2006 Author Share Posted October 28, 2006 Sorry, I didn't realize that. Thank you very much. What did you use to decode it? Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116018 Share on other sites More sharing options...
brendandonhue Posted October 28, 2006 Share Posted October 28, 2006 The end of the script you posted decodes itbase64_decode() then gzuncompress() then stripslashes(). Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116030 Share on other sites More sharing options...
wiseguy Posted October 28, 2006 Author Share Posted October 28, 2006 Thanks again but I really don't understand how to gzuncompress. I have other encoded strings that base64 will not deocode. Do you know what encoding is used in the line below?if ($output !== stripslashes_ascii("eF7LyM9NLUhMT43PyczLji8uSExOBQBN3Qe/")) die("error mid"); Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116041 Share on other sites More sharing options...
brendandonhue Posted October 28, 2006 Share Posted October 28, 2006 That says "homepage_link_space" Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116050 Share on other sites More sharing options...
wiseguy Posted October 28, 2006 Author Share Posted October 28, 2006 Could you explain for me the exact process you are using to decode these? Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116069 Share on other sites More sharing options...
brendandonhue Posted October 28, 2006 Share Posted October 28, 2006 The code contains a function called statout() that decodes the strings[code=php:0]function statout($mystring) { $mystring = gzuncompress(base64_decode($mystring)); return $mystring;}[/code] Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116070 Share on other sites More sharing options...
wiseguy Posted October 29, 2006 Author Share Posted October 29, 2006 [quote author=brendandonhue link=topic=113017.msg459284#msg459284 date=1162073324]The code contains a function called statout() that decodes the strings[code=php:0]function statout($mystring) { $mystring = gzuncompress(base64_decode($mystring)); return $mystring;}[/code][/quote]Thanks, but like I said, I know nothing about PHP and have no idea on how to use that function to decode the strings. Could you give me an example of the procedure to decode a string? Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116127 Share on other sites More sharing options...
brendandonhue Posted October 29, 2006 Share Posted October 29, 2006 [code=php:0]<?phpfunction statout($mystring) {$mystring = gzuncompress(base64_decode($mystring));return $mystring;}echo statout('eF7LyM9NLUhMT43PyczLji8uSExOBQBN3Qe/');?>[/code] Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116442 Share on other sites More sharing options...
wiseguy Posted October 29, 2006 Author Share Posted October 29, 2006 Got it! Thank you so much brendandonhue. You have been more than helpful. Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116466 Share on other sites More sharing options...
brendandonhue Posted October 30, 2006 Share Posted October 30, 2006 No problem :) Link to comment https://forums.phpfreaks.com/topic/25387-resolved-can-anyone-decode-this/#findComment-116529 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.