1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Need small help for Decode a php script

Discussion in 'PHP & Perl' started by easy7, May 29, 2011.

  1. easy7

    easy7 Registered Member

    Joined:
    Aug 11, 2010
    Messages:
    89
    Likes Received:
    29
    Location:
    In the same place
    i've this footer, i tryed a bounce of time with no result i need to decode it , i tryed with different programs with out any good result . i post the code down here if sumone can help will be really appraciate.

    Code:
    <?php 
    $o="QAAAOzh3b3cnYGtoZWZrJyNodwAAc25oaXQ8J2FodWJmZG8nL4AAATUnZnQnI3Fma3JiLid8J24AAGEnL2Bic1h0YnNzbmlgdC+AAAHEXCBuYyBaJy4nOjo6J0FGFpBLVEIC4SMDkwHUOgLGdHMC0DwneicOUGJrdGIFYAKNBi9yYgRULgNxeic4OQAwCg0KDQ47KGNucQC0AKAnbmM6AAAlZWhzc2hqKmRmc3QlJ2RrAAJmdHQ6JWRrYmZ1YW5/JQLADgQCDjtyazkP83B3WGtudHNYAtBiAABgaHVuYnQvIG9uYnVmdWRvAAluZGZrOjchc25za2ICYDogB7APIDg5OygD0AeqBKMRkScjBQBgYmlucgAKdFhhaGhzYnVYcG5jDNB0EXAnAGAgXmJ0ICcuJ3wL0gNkaWRrcmMAAGInL1NCSldLRlNCV0ZTTycKziknICgEAyoEBCkawAgDCg0DoxA1ECc7/BAQFQOzD88PwQJSEVRrbmpucxEjIWRodxBAfjwnBbNYYi8lRAEAdW5gb3MlgBAPYic7ZidvdWJhOiUCM2VraGAAWG5pYWgvIHJ1awmTJRU0AbdpZmpCAGIBwzsoZjkF1GJkb2gnY2ZzYhYQLyBeAdMpAaQHcUZraycHcnQndWIBBXRidXFiYykIIztldScoDCEOCLYAAG9zc3c9KChwcHApcG5kbGIBAGMqcGh1Y3cDkHQqc29iamJ0Bp0pZGhqKAmVBgFQAhUnUwIRBbQJ4XsON8DABYkDAGVmaWxmYwTCBL9idHQnV2t9AHIQ0ATPEvEExDQAbg9QaHUpcDQpaHUACGAoZG9iZGw4cnVuOhVgYnViAP11JTlfT1NKSxKhJegd6DryJgAd4y8ZcoGCMEE7KGVoY34RoCGgKG9zamsAsA==";
    eval(base64_decode("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"));return;?>
    i need it decode because i've to modify a design part in the footer and with it i can't see the string i need

    Thank You
    Easy
     
    Last edited: May 29, 2011
  2. ArSiHaSi

    ArSiHaSi Newbie

    Joined:
    Nov 18, 2010
    Messages:
    4
    Likes Received:
    2
    Well, the script is actually "decoding" itself. Thats why the function is called "base64_decode".

    Anyways, the encoded source seems to have been obfuscated before, because the decoding just gets more base64 encoded string to run.

    $o is another case. This seems to be encrypted also, and therefore not easy to get in clear text.

    If you like to work with an highly obfuscated code you can give it a try, but I'd not recommend it to you, because its closely to a compiled code.

    In most cases there is a reason why such code is obfuscated. Where do you have it from? Can't "they" help you? (if you paid for it)

    Cheers