 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 53
 Members: 0
 Total: 53
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
I cant for the life of me decode this one ioncube file :( |
|
 Posted: Mon Jan 16, 2012 7:28 am |
 |
|
| HappyToHelp |
| Regular user |
 |
|
| Joined: Jan 14, 2012 |
| Posts: 20 |
| Location: Uk |
|
|
 |
|
 |
|
I purchased a script ages ago and need to get rid of some annoying offer that the link points back too called "Powered By"
I am positive it's in the "offerheader.php" file but can not decode the damn thing.
It's really getting me down because I was due to start marketing this thing last week, so far it's taken hours of my life away.
Please can someone help me out because I just need this file implemented.
Offer Header
<?php //0046b
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);
?>
4+oV5BRh1ZVfC/iuu5+J57KVIeXy2fmkNs5lIiTPv0s4XpFCUA/PJjnekDU8KDkxi3KCrhpxHCIU
eHW+BVUDyl5EepGMNf/Qv7AS772YAA771EPcXjjG8+fD5au9KDJ1Ol3BcFyIz4rYtv+W8lxYhPRl
fEK2hsAfKfNKNsmEWtrfwT0kLYK7ADoDXkKn/PMVWsDLyeNDjSReCvkXcjTbCkHop60B+cS75oHx
HKXPVbhhaqGpm6tfScF8/kBEoqAN4blZXIxcEfkegY7CPuKd1n3TyvEEdg+g8PCXO/yE8C/Mwuj8
+oE4cDf2Ox4qWhsHD5ipnLBmEzBlZASs+DEA5SmgyOfnfUaJZEHj4xbBZmuBKVjXhMXYQnKg5L11
cDx3ebNxstIigxcGedvEs0l9sP+U3+L2OlVbdlj5HsyLvBiECWpP2MK8zHLC8NxjOiTE55XxIKcC
EXgGoeSD9PkdlnVbfm6pmO87nsckApeFAcAfKIry5npt33QGrNZ/Yxbkio1BVZAtTkPd/y9OZsRG
F/V/EiknFVBkrBC2TK+0IX5dsIjVbgVeSCeZssyCr81HeqBpD11tQoDBNqfIKWcyTXyCxJIw9Rr9
lw8eC6Il2hvO8FELgmje2l8n4wmHvK6h3rIzLJkiUzz61QnQyiCTBJIWO9Q1YB8fXyetFw4Voknd
iY7TaxXbeEQRSHuaFj9D3xnXYoKL8cdB8kdXNJyUqE2eqpYI0qzGlTvHSCnXtjTeEw2XX+ph9Q4Z
rkit+s72W9TfDjdioVAEDOJPnIT/Q2aII1JCuB2rOpDEad0Wsh6hyFd/vhTWP9ZetE5LorcvRjbz
295JKrgWh5be0CCcJGkQo2YSCDdc7UPjoL2AbeRbfL1m+pZjV54FU2hoy+1NZs61dn05NZ5MOVqR
CBJnLSXfwnnkQExCraHpbIEhD47IQP6HEt0PrEWfxwusikOQ8Qj++Jq6ZOO+7uIVQIrXfcx/vyYK
DO4OVhKJg7t0jsnfGMxNpgNn4O2eiTXYKBNKTsG5jrgw2Gs4SyCkOckYX6jKINLnpO7qAMCYJKyd
YsLdNBBgmFpmoQcRAzXXKJ+vcBYfjP7VouPwA10Fk8q2vgu4T4DV2h+HiQP3H+dRuDJGHl84UN6+
2zvAL0zHgjXS5motqGzUyz81xYV4O/rpgXdHkQ7pub8OaJXvc+uTao+f/Y2nEnsTKWxV3rEKLigx
HtQ7jhJNTdXtlJ5ShRvdQUFQ5wVPaZaYO5t2kWbmVyxxH1SFuS5gNekSgn5IqLhllZMvrDyM438W
xc2OpW7UB3Hjl1wf1jzu5dRSjVI8Py7VQWD5PKEAybK9w+CL3sofSeOzeL29rMy= |
|
Last edited by HappyToHelp on Mon Jan 16, 2012 10:15 am; edited 1 time in total |
|
|
|
|
|
|
|
| Posted: Mon Jan 16, 2012 7:36 am |
|
|
| DvStone |
| Regular user |
|
|
| Joined: Jan 15, 2012 |
| Posts: 6 |
|
|
|
|
|
|
|
This archive is with problems…
It accuses error in heading
It dispatches by post the original…
You used which version of the IonCube? |
|
|
|
|
| Posted: Mon Jan 16, 2012 7:37 am |
|
|
| HappyToHelp |
| Regular user |
|
|
| Joined: Jan 14, 2012 |
| Posts: 20 |
| Location: Uk |
|
|
|
|
|
|
| DvStone wrote: | This archive is with problems…
It accuses error in heading
It dispatches by post the original…
You used which version of the IonCube? |
Hi There
I'm not too sure in all honestly, it's just a script we purchased a while back, truth is I have no clue about any of what you just mentioned sorry. |
|
|
|
|
| Posted: Mon Jan 16, 2012 7:42 am |
|
|
| DvStone |
| Regular user |
|
|
| Joined: Jan 15, 2012 |
| Posts: 6 |
|
|
|
|
|
|
|
I noticed that you used an old version of ioncube, you to share with me? I am needing…
If you to arrange the original obtain to revert the code for you… |
|
|
|
|
|
|
|
|
| Posted: Mon Jan 16, 2012 7:47 am |
|
|
| HappyToHelp |
| Regular user |
|
|
| Joined: Jan 14, 2012 |
| Posts: 20 |
| Location: Uk |
|
|
|
|
|
|
| DvStone wrote: | I noticed that you used an old version of ioncube, you to share with me? I am needing…
If you to arrange the original obtain to revert the code for you… |
We did not secure this script it was already like it, the developer secured it even know it should not of been, I mean we paid for this script under the pretense that it was ready to be used 
I'm happy to trade something with you, I have 36,000 PR7-PR1 backlinks, I am very advanced in SEO and web development, I have hundreds of fantastic stuff.
I really need help with this because it's just beyond annoying now, thing is I'm not 100% sure that this offerheader.php file is going to be the exact file that has the "Powered By" code which points back to the link I am just guessing.
Ideally it's going to be the correct one etc... if you would be kind enuogh to decode it for me I would really really appreciate it. |
|
|
|
|
|
|
|
|
| Posted: Mon Jan 16, 2012 7:51 am |
|
|
| johnburn |
| Advanced user |
|
|
| Joined: Jan 14, 2011 |
| Posts: 199 |
| Location: Malaysia |
|
|
|
|
|
|
| Code: | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
</title>
<meta name="description" content="" />
<meta name="keywords" content="" />
<link rel="stylesheet" href="<?php echo $siteName; ?>css/style.css" type="text/css" />
<link href="<?php echo $siteName; ?>css/thickbox.css" rel="stylesheet" type="text/css" />
<script language="javascript">
var siteName = "<?php echo $siteName; ?>";
</script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery-1.3.2.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/jquery.validate.js"></script>
<script type="text/javascript" src="<?php echo $siteName; ?>scripts/ajax.js"></script>
<script language="javascript" src="<?php echo $siteName; ?>scripts/thickbox.js"></script>
</head>
<body>
<div id="wrapper"> |
|
|
|
|
|
|
|
|
|
| Posted: Mon Jan 16, 2012 7:55 am |
|
|
| DvStone |
| Regular user |
|
|
| Joined: Jan 15, 2012 |
| Posts: 6 |
|
|
|
|
|
|
|
Rat…
It obtained something with mine? |
|
|
|
|
| Posted: Mon Jan 16, 2012 8:16 am |
|
|
| HappyToHelp |
| Regular user |
|
|
| Joined: Jan 14, 2012 |
| Posts: 20 |
| Location: Uk |
|
|
|
|
|
|
| DvStone wrote: | Rat…
It obtained something with mine? |
Thanks so much John, I just replied in the other thread. DV what do you mean RAT? I don't follow you... |
|
|
|
|
www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
