Comments on: Evil Eval()

By: Snarky

Snarky — Tue, 26 Oct 2010 22:13:34 +0000

@zergan – Thanks.

“$ga = ord($l[1])<<8; //48 ??”
In the above, the author took the second index of what’s in the $l variable, then called the ord() function on it. Ord() returns the ASCII value of a character. Then he does a bitwise shift on that value, and assigns it to $ga. I’ve commented that that value is 48, just from working it out.

“die()”
Die tells PHP to stop whatever it’s doing and exit. Very handy if you don’t want to complete evaluating something, or have a critical error.

“eval()”
Eval takes in a string that’s valid PHP and runs it.

Hope that helps!

By: zergan

zergan — Tue, 19 Oct 2010 07:04:41 +0000

Incredible!! Real cool job! But i don`t understand step from cycle to array, please tell more for that things:
$ga = ord($l[1])<<8; //48 ??
die functions and eval. Thanks!

By: Snarky

Snarky — Tue, 07 Sep 2010 23:59:45 +0000

Emster: I took a brief look at the snippet you sent, it’s not base64 encoded PHP as above [base64 decode yields . If you have any background on it I may look further. Where’d you come across it, are there any bit functions being done to it as there were above?

By: Emster

Emster — Mon, 06 Sep 2010 15:39:16 +0000

Can you help me decode?: (admin edit, moved this to pastebin to make it much more readable, also broke it up at every 80 characters, strip the newlines to put it back together)

By: mutant

mutant — Thu, 30 Jul 2009 04:56:42 +0000

fer fraks sake, I wish I’d have searched for this before I did the EXACT same thing you did here. I would have saved myself HOURS of tedium.

Outstanding explanation though, it was driving me insane trying to figure out what this thing did!