Eval code?

Problems installing LinkMan?
Post Reply
J-WeB
Posts: 3
Joined: Wed Sep 08, 2010 12:14 am

Eval code?

Post by J-WeB »

Script URL:
Version of script:
Hosting company:
URL of phpinfo.php:
URL of session_test.php:
What terms did you try when SEARCHING for a solution: eval

Write your message below:

Is this eval code supposed to be in the php? I've seen something like it before that was redirect malware. I found it in the links.php page, downloaded directly from PHPJunkyard.

eval(gzinflate(base64_decode('DdBHsqJAAADQ43x/uRBBUs0KJEiQjA1spiTTZJEG+vQz7wivQO
/uVOFmKLv3tzil76Vgbn/zIhvz4vQjZbQO50kQBMm9sb5auxVwKZoR4tqVBGLUPnDqFOH+bKbwmeAzvy
kFB0WF95PyuCTJuCvo0UNhW2VqI/vollGRQZlcK/b9uFlNlX3olZkPt5I4IGebU8fBRJlKNinReNFdUU
WDh8UuSx6rcuXMRchRbJdYJmBTrH7+NkVCN6wp5Xb+UHWHZS2+zfnEFGX2uzy11T2LRsDExPHxkHkdm/
M96Awho+mQUkQUUW5VAzdSTTJ8N1SawJgFi7ebBdnmryNvTVDJHKJJQEAcVPEebX5paaP4CcoqhKt0zE
x5btB51ubuBpajV+n7xH1eFRjbA1MDpOxxBknTOuwT8o/JCmY17B1U1ZCPFHv1vGaZj3ZP9g2sIMMWth
s22o9sYi2BDQLD1l4y02HtRS4Q1WIxhamsE7Oz4oABkRRHDNfkXO1/8UsdPP5A3P9F6UuSM7/znWKrjQ
yHRFYJRuGkNh5aIr4/r2tuFCyV6+Fu3z7G2z961xH8mX5oCcmWg+m4GkWE1724EKnTNhv2oaqf6StWVe
DhWApeYoHUJTD6lLkgNk3Z9HL5+f39/fMP')));
Klemen
Site Admin
Posts: 10116
Joined: Fri Feb 11, 2005 4:04 pm

Re: Eval code?

Post by Klemen »

Yes, this is valid, it's the code that handles licensing.
Klemen, creator of HESK and PHPJunkyardWas this helpful? You can buy me a drink here Image

Image You should follow me on Twitter here

Help desk software | Cloud help desk | Guestbook | Link manager | Click counter | more PHP Scripts ...

Also browse for php hosting companies, read php books, find php resources and use webmaster tools
J-WeB
Posts: 3
Joined: Wed Sep 08, 2010 12:14 am

Re: Eval code?

Post by J-WeB »

Really? How does that script work? It just looks like jumbled letters to me. My Zen Cart php files got flooded with this type of code once and I had to restore it all.
Klemen
Site Admin
Posts: 10116
Joined: Fri Feb 11, 2005 4:04 pm

Re: Eval code?

Post by Klemen »

For obvious reasons I can't explain exactly how it works, but anyone competent in PHP can decode and verify it's safe.

What you got in Zen Cart was probably some injected malicious code (encoded to hide it) and has nothing to do with this code.
Klemen, creator of HESK and PHPJunkyardWas this helpful? You can buy me a drink here Image

Image You should follow me on Twitter here

Help desk software | Cloud help desk | Guestbook | Link manager | Click counter | more PHP Scripts ...

Also browse for php hosting companies, read php books, find php resources and use webmaster tools
Post Reply