outpostmm

Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter outpostmm

    (@outpostmm)

    Yeah that sounds strange. Those two are theme files, I know that much. I’m a little removed from the site, I’m a developer helping a friend who actually put the site together. I’ll probably notify the theme developers to take a look at this thread and see if they have any information. Thanks for looking into it.

    Thread Starter outpostmm

    (@outpostmm)

    I’ve set you up an account, it should have sent the password to [email protected]. I did install the beta version you linked to. It does work correctly with 4 files now, although it stops working in Firefox at 5. So, that’s one better than the previous version.

    Thread Starter outpostmm

    (@outpostmm)

    It looks like Firefox will now work with 4 files, but not 5 or more.

    I’m still looking into this. Let me know if I can help debug anything.

    Hi Otto,

    I think it’s worthwhile to work on a script that undoes this type of obfuscation. There are several perfectly legitimate ways to encrypt PHP code (Ioncube and Zend loaders, etc), but this type of thing is not one of them, this isn’t even “encryption”. I’ve got this basic script that will decode some of the more basic types of obfuscation, but it doesn’t do very well with loops. I’m working on another version to actually parse through the PHP code and identify the loop structures that will do a find and replace similar to the manual method. If you have anything to add to this, please do, I’ll check back here. This version will strip PHP tags and comments, and do a find and replace on eval.

    <?php

$orig = $unpack = '';

if (isset($_POST['original']))
{
  $orig = $_POST['original'];
  $code = trim(preg_replace(array(
    '/<\?php/mi',
    '/\?>/m',
    '/^\s*#.*$/m',
    '#^\s*//.*$#m',
    '#/\*.*?\*/#ms'
  ),
  '', $orig));

  if (strpos($code, 'eval') !== false)
  {
    $code = str_replace('eval', 'echo', $code);
    ob_start();
    eval($code);
    $code = ob_get_contents();
    ob_end_clean();
  }

  $unpack = str_replace(array(' ', "\n"), array('&nbsp;', '<br />'), htmlentities($code));
}

?>
<html>
<body>
<form method="post">
Original:
<textarea name="original" rows="10" cols="80"><?php echo $orig; ?></textarea>
<br /><br /><input type="submit" value="Unpack">
<br /><br />Unpacked:
<div style="width: 800px; height: 300px; overflow: auto; border: 1px solid black; font-family: monospace;"><?php echo $unpack; ?></div>
</form>
</body>
</html>
Viewing 4 replies - 1 through 4 (of 4 total)