деобфускация php

[Awakardia]

[GenCloud]

[epmak]

это обычный алгоритм, правда, несколько муторный.

[gorodetskiy]

Приложите все файлы, посмотрим

[pickwick]

Код:

PHP Fatal error:  Call to undefined function ѓЃ‚–—›љ”Џџ()

При попытке раскодировать. Либо вы дали не все файлы или же код изначально корявый.

[Awakardia]

Это файл из GTWEB
getfunction.php
http://rghost.ru/7mTm7zyKr
Все файлы берут функционал именно из этого файла

[pickwick]

Вот код, что там с кодировкой лень разбираться.

code

Код:

<?php
$┤▀┼┘≥≥▓÷┴└['│√─•┌└⌡├┼┬'] = ┐│┌√≈⌡ ■▐÷('DyBO', 'kI+EiA==');
$┤▀┼┘≥≥▓÷┴└['│┤├▒┌÷·└│░'] = ┐│┌√≈⌡ ■▐÷('H10UBw==', 'k4ybiIqRnpaT');
$┐│┌√≈⌡ ■▐÷ = $┤▀┼┘≥≥▓÷┴└['│┤├▒┌÷·└│░']();
error_reporting(0);
defined('EBBAFDBCACBBEE') || exit('Access Denied');
include 'config.php';

date_default_timezone_set("PRC");

function jiance($str)
{
return $str * 10;
}

function ckcookie()
{
$GLOBALS["gcook"] = 0;
if (isset($_COOKIE["user"]))
{
$m = explode(":", $_COOKIE["user"]);
$userinfo = mysql_fetch_array(mysql_query("SELECT * FROM account WHERE name='" . addslashes($m[0]) . "'"));
if ($userinfo)
{
if ($userinfo['tingyong'] == 1)
{
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />";
echo "<script>alert('ХЄіЕ▐ЇЕЇ╡Г╩▐Х╒╚Е│°Г■╗О╪│');history.go(-1);</script>";
exit;
}

$pass = strtolower($userinfo[password]);
if (strtolower(md5($m[0] . $pass)) == $m[1])
{
$GLOBALS["gcook"] = 1;
$GLOBALS["gname"] = $userinfo[name];
$GLOBALS["gnamemd5id"] = $userinfo[namemd5id];
$GLOBALS["gcreatetime"] = $userinfo[createtime];
$GLOBALS["gmoney"] = $userinfo[money];
$GLOBALS["gmoney2"] = $userinfo[money2];
$GLOBALS["gjifen"] = $userinfo[jifen];
$GLOBALS["ggold"] = $userinfo[gold];
$GLOBALS["gtg"] = $userinfo[tg];
$GLOBALS["gtg2"] = $userinfo[tg2];
$GLOBALS["ggold"] = $userinfo[gold];
$GLOBALS["gid"] = $userinfo[id];
$GLOBALS["ggoldconut"] = $userinfo[goldconut];
$GLOBALS["gregip"] = $userinfo[regip];
}
}
}
}

function ckdenglu()
{
if (isset($GLOBALS["gcook"]) == false)
{
ckcookie();
}

if ($GLOBALS["gcook"] == 0)
{
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />";
echo "Ф╡║Ф°┴Г≥╩И≥├О╪│";
exit;
}
}

function ConnectMysql($mysqlip, $mysqlname, $mysqlpass, $mysqlroledb)
{
$conn = mysql_connect($mysqlip, $mysqlname, $mysqlpass);
if ($conn == false)
{
return false;
}

if (mysql_select_db($mysqlroledb, $conn) == false)
{
return false;
}

mysql_query("SET @@character_set_connection=utf8,@@character_set_results=utf8,@@character_set_client=utf8");
return true;
}

function ConnectMysqlServer_NO_err($s)
{
$serverrow = mysql_fetch_array(mysql_query("SELECT * FROM server where id=" . $s));
if ($serverrow == false)
{
return false;
}

$conn = mysql_connect($serverrow["mysqlip"], $serverrow["mysqlname"], $serverrow["mysqlpass"]);
if ($conn == false)
{
return false;
}

if (mysql_select_db($serverrow["mysqlroledb"], $conn) == false)
{
return false;
}

mysql_query("SET @@character_set_connection=utf8,@@character_set_results=utf8,@@character_set_client=utf8");
return true;
}

function GetTG()
{
if (isset($_GET["sid"]))
{
$_SESSION[tg] = addslashes(trim($_GET["sid"]));
}

if (isset($_GET["Sid"]))
{
$_SESSION[tg] = addslashes(trim($_GET["Sid"]));
}

if (isset($_GET["SID"]))
{
$_SESSION[tg] = addslashes(trim($_GET["SID"]));
}
}

function Getshoptype($str)
{
if ($str == "money")
{
return "Г▌╟И┤▒";
}
  else
if ($str == "jifen")
{
return "Гї╞Е┬├";
}
  else
if ($str == "gold")
{
return "Е┘┐Е╝²";
}
  else
if ($str == "tg")
{
return "Ф▌╗Е╧©";
}
  else
if ($str == "ggold")
{
return "Ф╦╦Ф┬▐Е┘┐Е╝²";
}
}

function GetIP()
{
if (!empty($_SERVER["HTTP_CLIENT_IP"])) $cip = $_SERVER["HTTP_CLIENT_IP"];
  else
if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) $cip = $_SERVER["HTTP_X_FORWARDED_FOR"];
  else
if (!empty($_SERVER["REMOTE_ADDR"])) $cip = $_SERVER["REMOTE_ADDR"];
  else $cip = "";
return $cip;
}

unset($┤▀┼┘≥≥▓÷┴└); ?>

[Awakardia]

Вот код, что там с кодировкой лень разбираться.

code

Код:

<?php
$┤▀┼┘≥≥▓÷┴└['│√─•┌└⌡├┼┬'] = ┐│┌√≈⌡ ■▐÷('DyBO', 'kI+EiA==');
$┤▀┼┘≥≥▓÷┴└['│┤├▒┌÷·└│░'] = ┐│┌√≈⌡ ■▐÷('H10UBw==', 'k4ybiIqRnpaT');
$┐│┌√≈⌡ ■▐÷ = $┤▀┼┘≥≥▓÷┴└['│┤├▒┌÷·└│░']();
error_reporting(0);
defined('EBBAFDBCACBBEE') || exit('Access Denied');
include 'config.php';

date_default_timezone_set("PRC");

function jiance($str)
{
return $str * 10;
}

function ckcookie()
{
$GLOBALS["gcook"] = 0;
if (isset($_COOKIE["user"]))
{
$m = explode(":", $_COOKIE["user"]);
$userinfo = mysql_fetch_array(mysql_query("SELECT * FROM account WHERE name='" . addslashes($m[0]) . "'"));
if ($userinfo)
{
if ($userinfo['tingyong'] == 1)
{
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />";
echo "<script>alert('ХЄіЕ▐ЇЕЇ╡Г╩▐Х╒╚Е│°Г■╗О╪│');history.go(-1);</script>";
exit;
}

$pass = strtolower($userinfo[password]);
if (strtolower(md5($m[0] . $pass)) == $m[1])
{
$GLOBALS["gcook"] = 1;
$GLOBALS["gname"] = $userinfo[name];
$GLOBALS["gnamemd5id"] = $userinfo[namemd5id];
$GLOBALS["gcreatetime"] = $userinfo[createtime];
$GLOBALS["gmoney"] = $userinfo[money];
$GLOBALS["gmoney2"] = $userinfo[money2];
$GLOBALS["gjifen"] = $userinfo[jifen];
$GLOBALS["ggold"] = $userinfo[gold];
$GLOBALS["gtg"] = $userinfo[tg];
$GLOBALS["gtg2"] = $userinfo[tg2];
$GLOBALS["ggold"] = $userinfo[gold];
$GLOBALS["gid"] = $userinfo[id];
$GLOBALS["ggoldconut"] = $userinfo[goldconut];
$GLOBALS["gregip"] = $userinfo[regip];
}
}
}
}

function ckdenglu()
{
if (isset($GLOBALS["gcook"]) == false)
{
ckcookie();
}

if ($GLOBALS["gcook"] == 0)
{
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />";
echo "Ф╡║Ф°┴Г≥╩И≥├О╪│";
exit;
}
}

function ConnectMysql($mysqlip, $mysqlname, $mysqlpass, $mysqlroledb)
{
$conn = mysql_connect($mysqlip, $mysqlname, $mysqlpass);
if ($conn == false)
{
return false;
}

if (mysql_select_db($mysqlroledb, $conn) == false)
{
return false;
}

mysql_query("SET @@character_set_connection=utf8,@@character_set_results=utf8,@@character_set_client=utf8");
return true;
}

function ConnectMysqlServer_NO_err($s)
{
$serverrow = mysql_fetch_array(mysql_query("SELECT * FROM server where id=" . $s));
if ($serverrow == false)
{
return false;
}

$conn = mysql_connect($serverrow["mysqlip"], $serverrow["mysqlname"], $serverrow["mysqlpass"]);
if ($conn == false)
{
return false;
}

if (mysql_select_db($serverrow["mysqlroledb"], $conn) == false)
{
return false;
}

mysql_query("SET @@character_set_connection=utf8,@@character_set_results=utf8,@@character_set_client=utf8");
return true;
}

function GetTG()
{
if (isset($_GET["sid"]))
{
$_SESSION[tg] = addslashes(trim($_GET["sid"]));
}

if (isset($_GET["Sid"]))
{
$_SESSION[tg] = addslashes(trim($_GET["Sid"]));
}

if (isset($_GET["SID"]))
{
$_SESSION[tg] = addslashes(trim($_GET["SID"]));
}
}

function Getshoptype($str)
{
if ($str == "money")
{
return "Г▌╟И┤▒";
}
  else
if ($str == "jifen")
{
return "Гї╞Е┬├";
}
  else
if ($str == "gold")
{
return "Е┘┐Е╝²";
}
  else
if ($str == "tg")
{
return "Ф▌╗Е╧©";
}
  else
if ($str == "ggold")
{
return "Ф╦╦Ф┬▐Е┘┐Е╝²";
}
}

function GetIP()
{
if (!empty($_SERVER["HTTP_CLIENT_IP"])) $cip = $_SERVER["HTTP_CLIENT_IP"];
  else
if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) $cip = $_SERVER["HTTP_X_FORWARDED_FOR"];
  else
if (!empty($_SERVER["REMOTE_ADDR"])) $cip = $_SERVER["REMOTE_ADDR"];
  else $cip = "";
return $cip;
}

unset($┤▀┼┘≥≥▓÷┴└); ?>

спасибо оооогромное, а можно подробно рассказать чем и как.
Буду очень благодарен.

[pickwick]

спасибо оооогромное, а можно подробно рассказать чем и как.
Буду очень благодарен.

На лс ответь.