WooYun.org

$db_sql = "SELECT * FROM $db_table1 LEFT JOIN $db_table2 ON a.userid = b.userid  WHERE a.userid = $this->ec_member_username_id ";

function eccode($string, $operation = 'DECODE', $key = '@LFK24s224%@safS3s%1f%') {


		$result = '';


		if ($operation == 'ENCODE') {


			for ($i = 0; $i < strlen($string); $i++) {


				$char = substr($string, $i, 1);


				$keychar = substr($key, ($i % strlen($key)) - 1, 1);


				$char = chr(ord($char) + ord($keychar));


				$result.=$char;


			}


			$result = base64_encode($result);


			$result = str_replace(array('+', '/', '='), array('-', '_', ''), $result);


		} elseif ($operation == 'DECODE') {


			$data = str_replace(array('-', '_'), array('+', '/'), $string);


			$mod4 = strlen($data) % 4;


			if ($mod4) {


				$data .= substr('====', $mod4);


			}


			$string = base64_decode($data);


			for ($i = 0; $i < strlen($string); $i++) {


				$char = substr($string, $i, 1);


				$keychar = substr($key, ($i % strlen($key)) - 1, 1);


				$char = chr(ord($char) - ord($keychar));


				$result.=$char;


			}


		}


		return $result;


	}

$pscode = rand('99', '999');


$config .= "define('db_pscode', '" . md5(md5($pscode)) . "');\r\n";

$this->fun->setcookie('ecisp_member_info', $this->fun->eccode("$memberread[userid]|$memberread[alias]|$memberread[integral]|$memberread[mcid]|$memberread[email]|$memberread[lastip]|$ipadd|" . md5($_SERVER['HTTP_USER_AGENT']) . '|' . md5(admin_ClassURL), 'ENCODE', db_pscode));