We’re rewarding the question askers & reputations are being recalculated! Read more.
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 11825

Security aspects concerning code written in the programming language PHP which is often used for web applications.

0
votes
This file employs similar tactics to obfuscate the payload. The variable names and indentation changed, and its actions become very clear: <?php $char_transposition_map = Array('1'=>'N', '0'=>'S … [$source_text[$i]]) ? $transposition_map[$source_text[$i]] : $source_text[$i]; } return base64_decode($transposed_string); } $long_text = '<SNIP>'; eval(transpose_and_base64_decode($long_text, $char_transposition_map)); ?> Source: Deobfuscating PHP Malware …
answered Apr 15 '15 by kenorb
3
votes
About the script The code is obvious malicious script written in PHP for sending spams and other illegal activities. This script actually is very easy to decode by changing eval to echo and … > Subject: 55th Anniversary and Free Pizza X-PHP-Originating-Script: 763659:template46.php(236) : eval()'d code From: Pizza Hut <support@example.com> X-Mailer: mPOPWeb-Mail2.19 Reply-To: Pizza Hut <support …
answered Apr 15 '15 by kenorb
7
votes
4answers
Somebody hacked my site and uploaded this script (template46.php) to my webroot and its content is: <?php $vIIJ30Y = Array('1'=>'F', '0'=>'j', '3'=>'s', '2'=>'l', '5'=>'M', '4'=>'0', '7'=>'W', '6 … Anniversary and Free Pizza X-PHP-Originating-Script: 763659:template46.php(236) : eval()'d code But how? What's the method of its action? A bit of more background: It was found in Drupal 7 instance at …
asked Apr 15 '15 by kenorb
1
vote
That's a remote command shell for a server that's probably been hacked, and you should consider the server compromised. You would be wise to suspend everything it hosts, audit all code on the machine …
answered Apr 15 '15 by kenorb