Forum Moderators: coopster

Message Too Old, No Replies

Someone tried to hack my site! What is this code?

Hack, code

         

starefossen

7:03 pm on Nov 10, 2008 (gmt 0)

10+ Year Member



Someone recently tried to hack my site and they managed to upload some kind of PHP file with the folloing content:

<?php
eval(gzinflate(base64_decode('HZzHco--removed--PYwsHSwIniiKgiBZXf/973/+/fff//k/')));?>

Anoyone who knows what this code does?

[edited by: jatar_k at 7:25 pm (utc) on Nov. 10, 2008]

jatar_k

7:27 pm on Nov 10, 2008 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



I removed the code since publishing hacks is sketchy

you should be able to remove the eval and decode/deflate it and see what's there, I seem to have gotten more eval/gzinflate/encode content but it wasn't complete. I don't really have time to check now.

If anyone is interested you can sticky the poster, it is a large chunk of code.