blmg2009 Posted December 14, 2015 Share Posted December 14, 2015 Hi, I have the following code on one of my stores and I have been supplied a code which is below with base 64 code; However before running the code I would like to understand what is it doing. What changes will it make. Is there any way of outputting the actual PHP it is eval() -ing $GBAY = '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';$xm = '$BPk = base64_decode($GBAY); eval($BPk);'; eval($xm); I'm also wishing to learn more about this type of code and how I could use it myself, I believe it's like inception or something it has amazed me. Quote Link to comment https://forums.phpfreaks.com/topic/299747-understanding-what-a-eval-and-base_decoder-is-doing/ Share on other sites More sharing options...
blmg2009 Posted December 14, 2015 Author Share Posted December 14, 2015 After decoding it I finally found what it was, however what type of practice is there anywhere that I could learn more about it. It has really interested me. Quote Link to comment https://forums.phpfreaks.com/topic/299747-understanding-what-a-eval-and-base_decoder-is-doing/#findComment-1527941 Share on other sites More sharing options...
benanamen Posted December 14, 2015 Share Posted December 14, 2015 When someone has gone to that much trouble to hide code it is pretty much always a backdoor hacker script. Quote Link to comment https://forums.phpfreaks.com/topic/299747-understanding-what-a-eval-and-base_decoder-is-doing/#findComment-1527942 Share on other sites More sharing options...
requinix Posted December 14, 2015 Share Posted December 14, 2015 When someone has gone to that much trouble to hide code it is pretty much always a backdoor hacker script.Either an exploit, or legitimate code that a seller wants to "protect" from prying eyes. blmg2009, there's good news and bad news. The bad news is that we can't help you decode something that's under license, which the stuff you posted is. (Normally I would remove licensed code, but what you posted isn't... well, it's harmless to have exposed.) The good news is that you want to understand how it works, not to break it apart. A fine line indeed. It's a horrible practice and wastes system resources doing a lot of stupid work, but some people think it's what they have to do to protect their code. Maybe they don't know much about licensing, or maybe they think it's truly effective, or what else I don't know. But the basic idea is to be able to give someone some code that works without being readable by a human. With PHP that's typically some combination of base64_decode() and gzinflate() that ultimately produces some code which can be eval()ed. Do that over and over again and eventually you get actual code that does actual stuff. It's like layers of an onion, except peeling onions isn't as painful. 1 Quote Link to comment https://forums.phpfreaks.com/topic/299747-understanding-what-a-eval-and-base_decoder-is-doing/#findComment-1527943 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.