重新发！用开心版的IM 同学注意一下

xz2013 · 发表于 2016-6-3 11:22:39

今早起来发现自己的一个IM ··所有 LP 形式都失效·打开campagin 连接都不是跳LP 而都是跳到OFFER 连接· · 是所有LP 都这样·· LP 都是跑了很久的也没做任何改动··！而另外一个 VPS 的 IM 是正常的·· 唯一可能就是 IM 破解版存在什么漏洞··· 被竞争对手破坏了什么文件导致的！

大家注意一下哈！有高手的话非常感谢提出解决方法！因为之前论坛也有人爆出能看到别人IM 跑的所有OFFER ！

tmdsoft · 发表于 2016-6-3 12:40:40

mark 一下

kl116201547 · 发表于 2016-6-3 15:45:07

你是醉眼看花那个版本吗

54clz · 发表于 2016-6-4 20:25:34

破解版嘛有问题是正常的

wintop · 发表于 2016-6-4 21:19:10

官方的那个版本我基本都能解出来了，貌似好多函数过滤不好，我仔细看下，能不能sql注入..

wintop · 发表于 2016-6-4 21:22:20

wintop 发表于 2016-6-4 21:19$ E% Q* Y' v8 P( [! k+ ]
官方的那个版本我基本都能解出来了，貌似好多函数过滤不好，我仔细看下，能不能sql注入.. ...

刚查过， php 的pdo prepare 是可以防止sql注入的，所以基本上可以说我用的这个版本基本安全...
所有文件都看了一遍，未看到异常。

wintop · 发表于 2016-6-4 21:26:15

楼主可以把你的 im 打包下来我检查下 .

wintop · 发表于 2016-6-4 21:59:40

kl116201547 发表于 2016-6-3 15:45% u9 N, ?: s# ~1 r4 U" ~
你是醉眼看花那个版本吗

这个是我下载醉眼的，decoder 的
<?php
while (true) {
while (true) {
while (true) {
while (true) {
include( '../app/config/base.php' );
include( 'mt/mt_pwd.php' );
include( 'license/request.inc.php' );
$mysql = array(  );
$mysql['domain'] = '';
$mysql['click_ip'] = '';
$mysql['click_time'] = '';
$error = '';
$html['userName'] = '';
$isValid = 5;
$statusError = 5;
$coreError = '';
$verified = false;
$msgHeader = '';
$msg = '';
$tokenId = 5;
$loginFailed = false;
$responseDataEncryptCipher_W8u2p3urm5 = '+K9)wNU7@{KD8,,}';
$responseApiKey_JqeXTfS3du = 'a)3n_U5NXL,,OfU]';

if ($['REQUEST_METHOD']  = 'POST') {
$verified = true;
$['tokenId'];
$tokenId = ;

if (!) {
$[$tokenId .  . '_tokenName'];
$tokenName_str = (true ?  : );

if (!) {
$[$tokenName_str];
$tokenValue_str = (true ?  : );
new ( $tokenId );
$postAuthorization = ;
$postAuthorization->validated( $tokenName_str, $tokenValue_str );
$validPost = ;

if ($validPost) {
array_map( array( 'HtmlHelper' => , 'decodeHtml' =>  ), $ );
$ = ;
$['userName'];
$userName = ;
$['userPassword'];
$userPassword = ;
$db->prepare( 'SELECT *
                                 FROM mt_account
                                 WHERE user_name = :user_name' );
$loginSql = ;
$loginSql->bindParam( ':user_name', $userName, PARAM_STR );
$loginSql->execute(  );
$result = ;

if ($result) {
$loginSql->fetch;
}
}
}
}
}

( FETCH_ASSOC );

if ($data = ) {
new (  );
$bcrypt = ;
$bcrypt->verify( $userPassword, $data['user_password'] );
$isGood = ;

if (!) {
$error = 'Your password is incorrect.';
new ( 0, $userName, 'Password' );
$log = ;
$log->logger(  );
continue;
}

jmp;
$location =  . $['SCRIPT_NAME'];
$location = 'http://' . str_ireplace( 'account/' . LOGIN_PAGE, '', $location );
$db->prepare( 'UPDATE mt_account SET mt_location = :location; UPDATE mt_campaigns SET mt_location = :location;' );
$stmt = ;
$stmt->bindParam( ':location', $location, PARAM_STR );
$stmt->execute(  );
$redirect = 'campaigns.php';

if (!) {
$['lastPage'];
$redirect = ;
unset( $[lastPage] );
header( 'location: ' .  . $redirect );
exit(  );
continue;
}

break 3;
}

$log = ;
$log->logger(  );
}

$mysqlError &= '<u>Login Page</u> - ' . $loginSql->errorCode(  ) . ' - ' . $loginSql->errorInfo(  ) . '<br><br>';
}

$postAuthorization->failedPost(  );
$error = ;
$loginFailed = true;
$postAuthorization->createTokens( 5 );
$postAuthorization->tokenName;
$postTokenName = ;
$postAuthorization->tokenValue;
$postTokenValue = ;
$html['userName'] = HtmlHelper::encodeHtml( $['userName'] );
}

$c_data = array(  );

if (LOGIN_LOG) {
new ( 2 );
$log = ;
$log->logger(  );
new ( null, 'POST' );
$request = ;
$request->execute(  );
$request->errorNum;
$curlError = ;
json_decode( $request->responseBody );
$c_data = ;
$c_info = array(  );
$http_code = 5;
$success = false;

if (!) {
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info1 ), MCRYPT_MODE_ECB ) );
$isValid = ;
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info2 ), MCRYPT_MODE_ECB ) );
$statusCode = ;
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info ), MCRYPT_MODE_ECB ) );
$responseApiKey_mnwTcIrW3c = ;

if ($responseApiKey_mnwTcIrW3c  = $responseApiKey_JqeXTfS3du) {
$['imobi_data'] = array( 'imVersion' => $c_data->iVersion, 'xmlVersion' => $c_data->dVersion );
continue;
}
}
else {
$c_info = ;
$c_info['http_code'];
$http_code = ;
!;
$http_code  = 404;
$http_code  = 408;
$http_code  = 500;
$http_code  = 503;

if (( ( ( ( ( $curlError ||  ) ||  ) ||  ) ||  ) ||  )) {
new ( 'http://www.revivedmedia.net/imobitrax/uhadroewiur5y67ru.php', 'POST' );
$request = ;
$request->execute(  );
json_decode( $request->responseBody );
$c_data = ;
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info1 ), MCRYPT_MODE_ECB ) );
$isValid = ;
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info2 ), MCRYPT_MODE_ECB ) );
$statusCode = ;
trim( mcrypt_decrypt( MCRYPT_BLOWFISH, $responseDataEncryptCipher_W8u2p3urm5, rawurldecode( $c_data->info ), MCRYPT_MODE_ECB ) );
$responseApiKey_mnwTcIrW3c = ;
$responseApiKey_mnwTcIrW3c  = $responseApiKey_JqeXTfS3du;
}

if () {
$['imobi_data'] = array( 'imVersion' => $c_data->iVersion, 'xmlVersion' => $c_data->dVersion );
continue;
}

jmp;
switch (true) {
case (bool): {
new ( 'http://www.imobitrax.com/license/logger.php', 'POST', null, true, 1 );
$request1 = ;
$request1->execute(  );
$msgHeader = 'This domain (' . $['SERVER_NAME'] . ') is not licensed to run iMobiTrax.';
$msg = 'If you have a licensed copy of iMobitrax, there may be an error in the domain in our system. You can log into your user panel at <a href="http://www.imobitrax.com/users/profile" target="_blank">iMobiTrax.com</a> and update your domain. Please contact support if you have any questions.';
break ;
!;
switch (true) {
case ( $isValid &&  ): {
'This domain (' . $['SERVER_NAME'] . ') is licensed to run iMobiTrax, but you need to pay for your license.';
}
}
}
}

$msgHeader = ;
$msg = 'Please contact support to arrange payment for your license.';
}

break ;
$statusCode  = 1;
switch (true) {
case ( $isValid &&  ): {
$verified = true;
break ;
$statusCode  = 2;
switch (true) {
case ( $isValid &&  ): {
$msgHeader = 'Your monthly subscription to use iMobiTrax on this domain has expired.';
$msg = 'In order to use iMobiTrax, you must have a current subscription. Please login into your  <a href="http://www.imobitrax.com/users/member/index">user panel</a> to renew and/or update your monthly subscription.';
break ;
!;
}

case (  &&  ): {
new ( 'http://www.imobitrax.com/license/logger.php', 'POST', null, true, 3 );
$request1 = ;
$request1->execute(  );
$msgHeader = 'There appears to be an error in iMobiTrax.';
$msg = 'Please contact support.';
break ;
$statusCode  = 4;
switch (true) {
case ( ! &&  ): {
$msgHeader = 'iMobiTrax Technicians are currently upgrading our API core.';
$msg = 'Unfortunately during this time you are unable to login but your campaigns are still tracking as normal.  We should be finished with this core upgrade within the next hour.  Thank you for your patience as we continue to make iMobiTrax even better!  If you have any questions please do not hesitate to reach out to us at [email protected].';
break ;
new ( 'http://www.imobitrax.com/license/logger.php', 'POST', null, true, 5 );
$request1 = ;
$request1->execute(  );
$msgHeader = 'There appears to be an error in iMobiTrax.';
$msg = 'Please contact support!';
break ;
;
}
}
}
}

$statusCode  = 3;
}
}
}

new (  );
$postAuthorization = ;
$postAuthorization->createTokens( 5 );
$postAuthorization->tokenName;
$postTokenName = ;
$postAuthorization->tokenValue;
$postTokenValue = ;
$postAuthorization->tokenId;
$tokenId = ;
PageElement::topTemplateLogin( 'iMobiTrax Login' );

if ($loginFailed) {
if (!) {
echo ;
continue;
}

jmp;

if () {
echo ;
echo ;
echo ;
echo ;
echo ;
echo ;
echo ;
echo ;

if ($html['userName'] != '') {
echo ;
}
}

echo ;
continue;
}

jmp;
( $mysqlErrorMain );
}

!;

if (( ( $verified &&  ) &&  )) {
$page = 'login.php';
_mysqlError( $mysqlError, $page, false );
}

jmp;
(  );
return ;
?>

清风教父 · 发表于 2016-6-4 23:47:22

mark楼上强人。

纯净水 · 发表于 2016-6-5 13:01:06

确实有问题。今早突然campagin里面所有数据都丢了。
这还能愉快的玩耍吗？

seven777 · 发表于 2016-6-10 08:07:12

难怪，我说的我怎么突然500了，原来是破解版出问题了

lwmf · 发表于 2018-1-10 19:14:20

真假啊？

		自动登录	找回密码
密码			立即注册

谷歌+Bing+TT+MSN官方代理	⚡️按条S5代理⚡️静态⚡️独享⚡️5G	需要代理IP?⚡️Proxysites.ai⚡️	指纹浏览器，就用AdsPower
Mediabuy⚡️玩家开户首选	【鲁班跨境通-自助充值转账】	FB/GG/TT❤️官方免费开户	Affiliate 全媒体流量资源⚡️
Taboola/Outbrain /Bing⚡️一级代理	*开户投流-724h❤️人工在线**	【官方】❤️搜索套利买量投流开户	独立站⚡️开户投放
FB BM不限额，短id账单户	E.PN 虚拟卡	DuoPlus专注打造跨境电商云手机	BINOM TRACKER 60% OFF!
比Adplexity还好用的Spy工具	ADPLEXITY + ADVERTCN	7200W全球动态不重复住宅IP代理	全球虚拟卡, 支持U充值
Facebook 批量上广告	尤里改 - FB 稳定投放	免费黑五教程（持续更新、欢迎交流）	FB 三不限源头 - 自助下户充值转款
各种主页、账单户、BM户（优势）	⚡️个人户，bm户不限额，账单户	9Proxy ⚡️ $0.04/IP, 无限带宽	IPCola原生住宅IP⚡️$1.8/条双ISP
Google、Bing官方总代联盟流量开户	fb耐用号0.01一个	fb账号官方合作商	FB资源，账单户，分享户，国内一手
FB企业户BM户账单户源头	收FB代投工作室,收TrafficFactory账号	IPWO全球住宅代理⚡️免费测试⚡️	FB海外三不限-户源多费率低
PTM全球虚拟卡—进来交个朋友!	PTM虚拟卡⚡️费率透明⚡️额度随心	FB虚拟卡⚡️消费越多返现越多	虚拟卡 - Pay2.House
【找量】BA独家Nutra单找量	广告位出租	8500万高质量住宅IP，助力各种需求	虚拟卡返佣1%，国内持牌机构

重新发！用开心版的IM 同学注意一下

点评

点评

社区QQ达人