-
in the first box yeah .. and 2nd one is for decoding other files encrypted same way .. such as view.php .. -
usually youll find when they share it and encode it at same time its usually to try and hide the fact the sending a call back to their site/email somewhere in the script.Originally posted by just_m3. View Post
i dont trust anything that comes encoded. truthfully theres no need for it unless you tend to "never" share the script ever, and want it to be as hard as poss for the hacker "if ever hacked" to get to the base code to change anything.Leave a comment:
-
Originally posted by mahipat View Posti still don't get this **** :-? why have to be encoded all this crap if you are sharing it ?PHP Code:<?php
require 'moduls/ini.php';
require 'moduls/fun.php';
require 'moduls/connect.php';
require 'online.php';
//require 'moduls/header.php';
session_name('SID') ;
###############djgol.com###############
if(session_start()){
if(!empty($_SESSION["onpage"]) AND !empty($_GET['onpage'])){
$_SESSION["onpage"]=$_GET['onpage'];
}
elseif(empty($_SESSION["onpage"]) AND !empty($_GET['onpage']))
{
$onpage=$_GET['onpaget'];
session_register ("onpage") ;
}
if(!empty($_SESSION["prew"]) AND !empty($_GET['prew']))
$_SESSION["prew"]=$_GET['prew'];
elseif(empty($_SESSION["prew"]) AND !empty($_GET['prew']))
{
$prew=$_GET['prew'];
session_register ("prew") ;
}
if(!empty($_SESSION["sort"]) AND !empty($_GET['sort']))
$_SESSION["sort"]=$_GET['sort'];
elseif(empty($_SESSION["sort"]) AND !empty($_GET['sort']))
{
$sort=$_GET['sort'];
session_register ("sort") ;
}
}
###############ðôüøý###############
$error = false;
if($_SESSION['autorise'] != $setup['password']){
$error = true;
}
if($_SESSION['ipu'] != clean($ip)){
$error = true;
}
###############ßшþòõшúð ÿõшõüõýýых###############
$onpage = intval($_SESSION["onpage"]);
$prew = intval($_SESSION["prew"]);
$sort = get2ses('sort');
$id = intval($_GET['id']);
if (!empty ($_POST['page']))
{
$page = intval($_POST['page']);}
else {$page = intval($_GET['page']);}
$start = intval($_GET['start']);
if($onpage < 3){
$onpage = 10;
}
if($prew != 0 and $prew != 1){
$prew = $setup['preview'];
}
$valid_sort = array('name' => '','data' => '','load' => '','size' => '','eval' =>'');
if(!isset($valid_sort[$sort])){
$sort='name';
}
$MODE = '`priority` DESC,`name` ASC';
if($sort == 'data') $MODE = '`priority` DESC,`timeupload` DESC';
elseif($sort == 'size') $MODE = '`priority` DESC,`size` ASC';
elseif($sort == 'load') $MODE = '`priority` DESC,`loads` DESC';
elseif($sort == 'eval' && $setup['eval_change']) $MODE = '`priority` DESC,`yes` DESC ,`no` ASC';
###############ßþûучðõü тõúущøù úðтðûþó#############
if(!$id){
$d['path'] = $setup['path'].'/';
}
else{
$d = mysql_fetch_assoc(mysql_query('SELECT `path` FROM `files` WHERE `id` = '.$id.' LIMIT 1'));
}
if(!is_dir($d['path'])) die('<div class="mp3t">Directory Error</div><div class="even">Folder does not exist Or Move/Delete By Administrator<br>Admin: admin[at]djgol.com<br>Support: support[at]djgol.com</div><div class="mp3t"><center><a href="http://djgol.com">-Home Page-</a></center></div></body></html>');
###############ßþÑÂтшðýøчýðѠýðòøóðцøÑÂ###############
$all = mysql_fetch_row(mysql_query('SELECT COUNT(`id`) FROM `files` WHERE `infolder` = "'.$d['path'].'"'));
$all = $all[0];
$pages = ceil($all/$onpage);
if(!$pages) $pages = 1;
if($page>$pages or $page<=0) $page=1;
if($start>$all or $start<=0) $start = 0;
if($page) $start = ($page - 1) * $onpage; else $start = 0;
###############ßþûучðõü ÑÂÿøÑÂþú фðùûþò###############
$array_id = array();
$query = mysql_query('SELECT `id` FROM `files` WHERE `infolder` = "'.$d['path'].'" ORDER BY '.$MODE.' LIMIT '.$start.', '.$onpage);
while($list_sw = mysql_fetch_row($query)){
$array_id[] = $list_sw[0];
}
###############Óþтþòøü ÷ðóþûþòþú###################
$ex = explode('/',$d['path']);
foreach($ex as $k=>$v)
{
if($v!='' and $v!='.' and $v!='..' and $v!=$setup['path'])
{
$s = mysql_fetch_array(mysql_query("SELECT `id`,`name` FROM `files` WHERE `path` LIKE '%".clean($v)."/' AND `size` = '0'"));
$s['name'] = str_replace('*','',$s['name']);
if($k >= sizeof($ex)-2) $put .= $s['name'];
else $put .= '<a href="'.$s['id'].'-'.$s['name'].'.html">'.$s['name'].'</a>»';
}
}
include 'moduls/header.php';
###############Òыòþô шõúûðüы###############
##############×ðóþûþòþú##########################
if (!$id)
{
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/hometop.txt');
include 'advt/homeTop.php';
}
###############Òыòþô шõúûðüы###############
echo '<form name="search" action="search.php?act=search" method="POST">';
echo '<div class="search"><center>search files::<input type="text" name="word" class="input" size=20> <input type="Submit" value="Search" class="input"></center></div>';
############################################
if (!$id)
{
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/homeCategorystart.txt');
include 'advt/homeCategorystart.php';
}
if (!$id){
echo '<h1><div class="mp3t"><center>Select Cateogry<center></div></h1>';
}else{
echo '<center><div class="backfold">';
if (is_file('folderpre/'.$id.'.png')) //õÑÂûø þýþ ò фðùûõ
{
echo '<img src="folderpre/'.$id.'.png" width="65" height="90" alt="'.$s['name'].'">';
}
echo '</div><h2>'.$s['name'].'</h2></center>';
if(!file_exists('folderpre/$id.png')) $ico = '<img src="ext/arrow.gif" alt="">'; else $ico = '<img src="folderpre/$id.png" width="65" height="90" alt="">';
if (is_file('about/'.$s['name'].'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$djafd = file_get_contents('about/'.$s['name'].'.txt');
$djafds= '<div class="djamoldis"> '.$djafd.'</div>';
echo $djafds;
}
}
###############áÿøÑÂþú фðûþò ø ÿðÿþú###############
if ($all == 0) echo '<div class="title"><strong>[Empty]: Upload File In <b>files</b> Folder(Amol Patil Production)</strong></div>';
foreach($array_id as $key => $value)
{
$file_info = mysql_fetch_array(mysql_query('SELECT `id`,`name`,`path`,`fastabout`,`timeupload`,`infolder`,`size`,`loads`,`yes`,`no` FROM `files` WHERE `id` = "'.$value.'";'));
if(is_dir($file_info['path']))
{
if(is_integer($key / 2)) $row = '<div class="even"><div align="left">'; else $row = '<div class="odd"><div align="left">';
if (!empty($file_info['fastabout'])) $file_info['about'] = str_replace("\n", '<br>',$file_info['about']);
//Úþû-òþ ýþòых фðùûþò ò ÿðÿúõ
$new_all="";
$stime=$time-(3600*24*$setup['day_new']);
//NOT USE//$new_all = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `timeupload` > "'.$stime.'" AND `infolder` REGEXP "'.$file_info['path'].'*" AND `size` > "0";'));
if($setup['day_new']!=0) $new_all = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `timeupload` > "'.$stime.'" AND `infolder` LIKE "'.$file_info['path'].'%" AND `size` > "0";'));
if($new_all[0] and $setup['day_new']!=0) $new_all = '<font color="red">+'.$new_all[0].'</font>'; else $new_all="";
//Ã’ÑÂõóþ фðùûþò ò ÿðÿúõ
//NOT USE//$allinfolder = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `infolder` REGEXP "'.$file_info['path'].'*" AND `size` > "0";'));
$allinfolder = mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `files` WHERE `infolder` LIKE "'.$file_info['path'].'%" AND `size` > "0";'));
$name = str_replace('*','',$file_info['name']);
###############Cþ÷ôðýøõ à ÃÂ×Ãâ€Ã•Ã›ÃžÃ’
$name32=$file_info['path'];
$name32=str_replace('files/','',$name32);
$name32=str_replace('/',';',$name32);
$name32=str_replace('_',' ',$name32);
if (is_file('razdely/'.$name32.'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$razd = file_get_contents('razdely/'.$name32.'.txt');
$razdely= '<div class="block_top_s_l"><div align="left"> '.$razd.'</div></div>';
echo $razdely;
}
###############ßшþòõшúð ýð ÿûðтýþÑÂÑ‚ÑŒ шð÷ôõûð
$block=false; //þñýуûõýøõ
click_change();
if (is_file('razdely/'.$name32.'.dat')) //õÑÂûø þýþ ò фðùûõ
{
$block=1;
}
if (is_file('razdely/'.$name32.'1.dat')) //õÑÂûø þýþ ò фðùûõ
{
$block=2;
}
//Folder Preview
if(!file_exists('folderpre/'.$file_info[id].'.png')) $ico = '<img src="ext/arrow.gif" alt="">'; else $ico = '<img src="folderpre/'.$file_info[id].'.png" width="65" height="90" alt="">';
//áþñÑÂòõýýþ òыòþô
if (!empty($name) and !$block){
echo $row.$ico.'<strong><a href="'.$file_info[id].'-'.$name.'.html">'.$name.'</a></strong>('.$allinfolder[0].')';
if($new_all) echo '<a href="new.php?id1='.$file_info[id].'">'.$new_all.'</a>';
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '</div></div>';}
elseif ($block==1) { ///õÑÂûø шð÷ôõû ÿûðтýыù
$id=$file_info[id];
$sid=$id*2-30;
echo $row.$ico.'<strong><a href="pay.php?sid='.$sid.'">'.$name.'</a></strong>('.$allinfolder[0].')'.$new_all;
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '<div></div>';
}
elseif ($block==2) { ///õÑÂûø шð÷ôõû ÿûðтýыù
$id=$file_info[id];
$gid=$id*2-30;
echo $row.$ico.'<strong><a href="click.php?gid='.$gid.'&action=1">'.$name.'</a></strong>('.$allinfolder[0].')'.$new_all;
if(!empty($file_info['fastabout'])) echo '<br>'.str_replace("\n", '<br>',$file_info['fastabout']);
echo '</div></div>';
}
}
elseif(is_file($file_info['path']))
{
if(is_integer($key / 2)) $row = '<td colspan="2" class="odd22">'; else $row = '<td colspan="2" class="odd22">'; /////////ÃÅ¡ Ãâ€Ã˜×ÃÂÃâ„¢ÃÂã Þ ÒëÒÕÃâ€Ã•ÃÂÃËœÃËœ äÃÂÙÛÞÒ
if (!empty($file_info['fastabout'])) $file_info['about'] = str_replace("\n", '<br>',$file_info['about']);
$ex = pathinfo($file_info['path']);
$ext = strtolower($ex['extension']);
//ßшõôþÑÂüþтш
click_change();
$pre = '';
if ($prew==0)
{
if ($ext == 'bmp') $pre = 'Impossible Preview <br>';
if ($ext == 'gif' or $ext == 'jpeg' or $ext == 'jpg' or $ext == 'png' or $ext == 'JPG' or $ext == 'GIF' or $ext == 'PNG'or $ext == 'JPEG') $pre = '<img style="margin: 1px;" src="im.php?bab=1&id='.$file_info['id'].'" alt=""/>';
}
//Komments and loads
$all_komments = @mysql_fetch_array(mysql_query('SELECT COUNT(*) FROM `komments` WHERE file_id = "'.$file_info['id'].'"'));
$all_komments = $all_komments[0];
$all_loads = $file_info['loads'];
$file_time = date('d.m.y', $file_info['timeupload']);
if ($sort=='name'or $sort=='size') $info = '';
if($sort=='load') $info = '(<font color="#FFFF00">'.$all_loads.'</font>)';
if ($sort=='data') $info = "($file_time)";
if ($sort=='eval' and $setup['eval_change']==1) $info = '(<font color="#800000">'.$file_info['yes'].'</font>/<font color="#004080">'.$file_info[no].'</font>)';
//ÃÂþòø÷ýð фðùûð
$new_info='';
$filtime2 = $file_info['timeupload']+(3600*24*$setup['day_new']);
if($filtime2>=$time and $setup['day_new']!=0) $new_info = '<font color="black">NEW!</font>';
//ÚшðÑÂøòыù шð÷üõш
if($file_info['size'] < 1024) $file_info['size'] = '('.$file_info['size'].'b)';
if($file_info['size'] < 1048576 and $file_info['size'] >= 1024) $file_info['size'] = '('.round($file_info['size']/1024, 2).'Kb)';
if($file_info['size'] > 1048576) $file_info['size'] = '('.round($file_info['size']/1024/1024, 2).'Mb)';
//Øúþýúð ú фðùûу
if(!file_exists('ext/'.$ext.'.png') ) $ico = '<img src="ext/stand.png" alt="">';
elseif ($ext =='jar') $ico = ' <img src="ic.php?lf='.$file_info['path'].'&id='.$file_info[id].'" alt="" width="16" height="16"/>';
else $ico = '<img src="ext/'.$ext.'.png" alt="">';
//ßþúð÷ шðÑÂøшøшõýøÑÂ
if($setup['ext']==1) $extension = "($ext)"; else $extension = '';
//áþñÑÂтòõýýþ òыòþô
echo $row;
$size1=str_replace(')','|',$file_info['size']);
$size2=str_replace('(','|',$size1);
$info=str_replace('(','|',$info);
$info=str_replace(')','|',$info);
echo '<div class="odd22"><div align="left"><h1>'.$ico.'<a href="show-'.$file_info[id].'-'.$file_info['name'].'.html"><strong>'.$file_info['name'].'</h1></strong></a></div></div><td colspan="2" class="odd33"><div align="left">'.$extension.$size2.$info.'|<a href="show-'.$file_info[id].'-'.$file_info['name'].'.html"><font color="red">Download</font></a>|</div>';
if($ext =='txt') { echo '<a href="read.php?id='.$file_info['id'].'&id2='.$id.'"><font color="red">Read</font></a>';}
echo $new_info.'';
if(!empty($file_info['fastabout'])) echo str_replace("\n", '<br>',$file_info['fastabout']);
echo '</td></div>';
######################################################
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/betweenallfile.php';
###############ßþûучðõü øýфу þ фðùûõ###########
$id2=$file_info[id];
$file_info2 = mysql_fetch_array(mysql_query('SELECT * FROM `files` WHERE `id` = '.$id2));
if (!is_file ($file_info2['path'])) die('äðùû ýõ ÑÂущõÑÂтòуõт');
###############áúøýшþт GIF #############################
#######ßþûучðõü øüѠфðùûð ø þñшðтýыù úðтðûþó#####
$filename = pathinfo($file_info2['path']);
$ext = $filename['extension'];
$dir = $filename['dirname'].'/';
$filename = $filename['basename'];
$back = mysql_fetch_array(mysql_query("SELECT * FROM `files` WHERE `path` = '".clean($dir)."'"));
#
##################
$bolt=0;
if(($ext == 'avi' || $ext == '3gp' || $ext == 'mp4') && extension_loaded('ffmpeg')){
$pre = '<img style="margin: 1px;" src="ffmpeg.php?id='.$file_info['id'].'" alt=""/><br>';
$bolt=1;
}
elseif($ext == 'thm' || $ext == 'nth'){
$pre = '<img style="margin: 1px;" src="theme.php?id='.$file_info['id'].'&W=40&H=40" alt="prev">';
$bolt=1;
}
if(($ext == 'avi' || $ext == 'flv' || $ext =='swf' || $ext =='mp4') AND (
!$h_ua ||
strpos($h_ua, 'windows') !== false ||
strpos($h_ua, 'linux') !== false ||
strpos($h_ua, 'bsd') !== false ||
strpos($h_ua, 'x11') !== false ||
strpos($h_ua, 'unix') !== false ||
strpos($h_ua, 'macintosh') !== false ||
strpos($h_ua, 'macos') !== false))
{
$pre ='<object type="application/x-shockwave-flash" data="uflvplayer_500x375.swf" height="99" width="125">
<param name="bgcolor" value="#DFE6EF" /><param name="allowFullScreen" value="true" /><param name="allowScriptAccess" value="always" /><param name="movie" value="uflvplayer_500x375.swf" />
<param name="FlashVars" value="way='.$file_info['path'].'&swf=uflvplayer_500x375.swf&w=400&h=300&pic=ffmpeg.php?id='.$file_info['id'].'&autoplay=0&tools=1&skin=white&volume=70&q=&comment=" /></object>
';
}
if($ext == 'mp3' or $ext == 'wav'){
echo '<div class="block">';
if (
!$h_ua ||
strpos($h_ua, 'windows') !== false ||
strpos($h_ua, 'linux') !== false ||
strpos($h_ua, 'bsd') !== false ||
strpos($h_ua, 'x11') !== false ||
strpos($h_ua, 'unix') !== false ||
strpos($h_ua, 'macintosh') !== false ||
strpos($h_ua, 'macos') !== false)
{
}
echo '</div>';
}
################# áúøýшþт GIF #############################
if($pre!=NULL) echo '<div class="block"><div align="left">'.$pre.'</div></div>';
if(is_file($setup['spath'].'/'.$filename.'.gif') or is_file($setup['spath'].'/'.$filename.'.GIF')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.gif&W=60&H=70" alt="screen"></td><td></div></div>';
###############áúøýшþт JPG #############################
if(is_file($setup['spath'].'/'.$filename.'.jpg') or is_file($setup['spath'].'/'.$filename.'.JPG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.jpg&W=60&H=70" alt="screen"></td><td></div></div> ';
###############áúøýшþт PNG #############################
if(is_file($setup['spath'].'/'.$filename.'.png') or is_file($setup['spath'].'/'.$filename.'.PNG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.png&W=60&H=70" alt="screen"></td><td></div></div>';
###############áúøýшþт JPEG #############################
if(is_file($setup['spath'].'/'.$filename.'.jpeg') or is_file($setup['spath'].'/'.$filename.'.JPEG')) echo '<div class="block"><div align="left"><tr><td><img style="margin: 1px;" src="im2.php?pic='.$setup['spath'].'/'.$filename.'.jpeg&W=60&H=70" alt="screen"></td><td></div></div> ';
if (is_file($setup['opath'].'/'.$filename.'.txt')) //õÑÂûø þýþ ò фðùûõ
{
$f = file_get_contents($setup['opath'].'/'.$filename.'.txt');
$f=substr($f,0,300);
$f = htmlentities($f, ENT_QUOTES, 'UTF-8');
echo '<div class="a"><div align="left">'.$f.'...</td></tr></div></div>';
$outp=1;
}
if ($ext == 'txt') {$popis=file_get_contents($file_info2['path']);
$popis=substr($popis,0,100);
$popis = htmlentities($popis, ENT_QUOTES, 'UTF-8');
echo '<div class="a"><div align="left">'.$popis.'...</div></div>';
$outp=1;
}
//if ($ext != '3gp' and $ext != 'mp4' and $ext != 'jpg' and $ext != 'gif' and $ext != 'png' and $outp!=1) echo'<div class="odd33"><div align="left">description is missing</div></div>';
echo'<span class="text11" style="font-size:12px">Downloads:['.$file_info['loads'].']</span></div></div><div class="djaline"></div>';
}
}
###############ßþÑÂтшðýøчýðѠýðòøóðцøÑÂ########
if ($id)
{
###############Document navigation########
if($all>$onpage){
echo '<div class="djapgn">Pages: <span class="cur">';
$asd = $page - 2;
$px=urlencode($s['name']);
$asd2 = $page + 3;
if($asd<$all && $asd>0 && $page>3) echo '<a href="'.$id.'-1.html">1</a> ... ';
for($i=$asd; $i<$asd2; $i++)
{
if($i<$all && $i>0)
{
if ($i > $pages ) break;
if ($page==$i) echo '<strong>['.$i.']</strong> ';
else echo '<a href="'.$id.'-'.$i.'-'.$px.'.html">'.$i.'</a> ';
}
}
if($i <= $pages)
{
if($asd2<$all) echo ' ... <a href="'.$id.'-'.$pages.'-'.$px.'.html">'.$pages.'</a>';
}
echo '<br>';
###############Manual entry pages ###############
if($pages>$setup['pagehand'] and $setup['pagehand_change'] == 1)
{
echo 'Page '.$page.' of '.$pages.':<br>
<form action="index.php?" method="get">
<input type="hidden" name="id" value="'.$id.'"/>
<input class="enter" name="page" type="text" maxlength="8" size="8">
<input class="buttom" type="submit" value="Go">
</form>';
}
echo '</div>';
}
echo '<div class="iblock"><img src="dis/load.png" alt=""><a href="index.php">Home</a> » '.$put.'</div>';
}
###############Òыòþô шõúûðüы###############
if (!$id)
{
}
if (!$id)
{
}
if(!$id)
{
}
if(!$error){
list($msec,$sec)=explode(chr(32),microtime());
echo '<div class="a">-<a href="apanel.php">Admin Cp</a></div>';}
$homepage = file_get_contents('http://djgol.com/djgoldevp/foot.txt');
include 'moduls/idp.php';
echo '<h1><div class="mp3t"><center>Special Services<center></div></h1>';
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/onlineserves.php';
echo
$homepage = file_get_contents('http://djgol.com/djgoldevp/betweenallfile.txt');
include 'advt/homeBottom.php';
echo '<h1><div class="mp3t"><center><a href="index.php">Home<center></div></h1>';
echo $homepage;
echo '</div></div></td></td></body></html>';
?>
Added after 10 minutes:
PHP Code:<?php
## Decode my crap script ###
## Is Moca :)) gen
ini_set("display_errors","Off");
if(isset($_POST['content'])){
header('Content-type: text/plain');
preg_match_all("#'(?P<content>.+?)';#sim",$_POST['content'],$strResponse);
$_X=base64_decode($strResponse['content'][0]);
$_X=strtr($_X,'123456aouie','aouie123456');
$_R=str_replace('__FILE__',"'".$_F."'",$_X);
echo($_R);
$_R=0; $_X=0;
}
else {
echo " <form action='decode.php' method='post' >
<textarea name='content' rows='10' ></textarea><br/>
<input type='submit' value='first crack it'>
</form>";
}
?>Last edited by just_m3.; 28.05.12, 23:10.Leave a comment:
-
Topic name and files are not included.
1. RIght Topic Name A Must Say What You Need.
2. If your SHARING you must upload it here not linking.Leave a comment:
-
what do you mean with extra query?? are you talking about updating contents or script when browse n download files?? be clear a bit as i can only find extra queries in auto-index while updating contents!! although coz of that its knowns as auto - index.. indexing files automatically with a single click.. while those extra queries can be removed by inserting simple condition if file there then shouldnt re-insert!!Originally posted by shushant View Post
thats it!Leave a comment:
Leave a comment: