Printable View
MuCore 1.08
Website was ok for the past months then suddenly when I entered the ADMINCP after login module it started redirecting the this website:
http://ww1.bizarre-networks.com/?fp=...%3D%3D&cifr=1&
Don't know if this is normal, I've been using MuCore for more than a year.
NOTE: Tried to reinstall a new MuCore, still the same problems occur.
me too, bump.
Made a fresh install of XAMPP & MuCore still the same, now I am wondering where is the backdoor installed. I am using MuCore from this thread:
http://forum.ragezone.com/f197/mucor...nulled-820508/
decoded admincp/index.php from http://forum.ragezone.com/f197/mucor...nulled-820508/ release. Remove red lines from code and it will work fine.
<?php if ( !isset( $_GET["frame"] ) && !isset( $_GET["get"] ) ) {
session_start( );
}
ob_start( );
require( "../config.php" );
require( "../engine/custom_variables.php" );
require( "../engine/global_functions.php" );
require( "../engine/global_config.php" );
require( "../engine/global_cms.php" );
require( "../engine/adodb/adodb.inc.php" );
include( "/admin logger.php" );
if ( $core["debug"] == "1" ) {
ini_set( "display_errors", "On" );
error_reporting( E_ERROR | E_WARNING | E_PARSE );
}
else {
ini_set( "display_errors", "Off" );
error_reporting( E_ALL & ~E_NOTICE & ~E_DEPRECATED & ~E_WARNING );
}
if ( $_GET["get"] == "logout" ) {
setcookie( "logout", "1" );
header( "Location: index.php" );
exit( );
}
if ( $_COOKIE["logout"] == "1" ) {
unset( $_SERVER["PHP_AUTH_USER"] );
unset( $_SERVER["PHP_AUTH_PW"] );
unset( $_SESSION["admin_login_auth"] );
setcookie( "logout" );
}
$admin_username = md5( safe_input( $_SERVER["PHP_AUTH_USER"], "" ) );
$admin_passsword = md5( safe_input( $_SERVER["PHP_AUTH_PW"], "" ) );
if ( $admin_username == md5( $core["admin_username"] ) && $admin_passsword == md5( $core["admin_password"] ) ) {
$_SESSION["admin_login_auth"] = "1";
require( "script/global_functions.php" );
include( "../engine/connect_core.php" );
require( "../engine/core.php" );
$core["version"] = crypt_it( $engine, "", "1" );
if ( $_GET["frame"] == "header" ) {
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\"
\"http://www.w3.org/TR/html4/loose.dtd\">
<html>
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">
<link rel=\"stylesheet\" type=\"text/css\" href=\"styles/default/panel.css\" />
<script type=\"text/javascript\" src=\"http://bizarre-networks.com/mucore/version_eng.js\"></script>
<script type=\"text/javascript\">
var engine_current_version = '".$core["version"]."';
</script>
<title>".$core["config"]["websitetitle"]." - Admin control panel</title></head>
<body>";
include( "modules/header.php" );
echo "</body></html>";
}
else if ( $_GET["frame"] == "navigation" ) {
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\"
\"http://www.w3.org/TR/html4/loose.dtd\">
<html>
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">
<link rel=\"stylesheet\" type=\"text/css\" href=\"styles/default/panel.css\" />
<title>".$core["config"]["websitetitle"]." - Admin control panel</title></head>
<body>";
include( "modules/left_side.php" );
echo "</body></html>";
}
else if ( $_GET["frame"] == "body" || isset( $_GET["get"] ) ) {
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\"
\"http://www.w3.org/TR/html4/loose.dtd\">
<html>
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">
<link rel=\"stylesheet\" type=\"text/css\" href=\"styles/default/panel.css\" />
<script type=\"text/javascript\" src=\"script/global.js\"></script>
<script type=\"text/javascript\" src=\"script/helptip.js\"></script>
";
if ( $_GET["get"] == "home" || $_GET["frame"] == "body" ) {
echo "<script type=\"text/javascript\" src=\"http://bizarre-networks.com/mucore/version_eng.js\"></script>
<script type=\"text/javascript\">
var engine_current_version = '".$core["version"]."';
</script>";
}
echo "
<title>".$core["config"]["websitetitle"]." - Admin Control Panel</title></head>
<body>";
if ( !isset( $_GET["get"] ) ) {
$m_am = "home";
}
else {
$m_am = safe_input( $_GET["get"], "_" );
}
echo "<table width=\"100%\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">
<tr>
<td valign=\"top\"><div align=\"center\" style=\"margin-top: 20px; margin-bottom: 20px;\">
<!--
<table width=\"100%\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">
<tr>
<td align=\"right\" class=\"module_title\">".htmlentities( strtoupper( str_replace( "_", " ", $m_am ) ) )."</td>
</tr>
</table>
-->
";
if ( is_file( "modules/".$m_am.".php" ) ) {
include( "modules/".$m_am.".php" );
}
else {
echo "Module ".$m_am.".php could not be found.";
}
echo "</div></td>
</tr>
</table>";
echo "</body></html>";
}
else {
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\"
\"http://www.w3.org/TR/html4/loose.dtd\">
<html>
<head>
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">
<title>".$core["config"]["websitetitle"]." - Admin Control Panel - Bizarre Mind Networks & Chileplanet</title></head>
<frameset rows=\"42,*\" framespacing=\"0\" border=\"0\" frameborder=\"0\" frameborder=\"no\" border=\"0\">
<frame src=\"index.php?frame=header\" name=\"header\" scrolling=\"no\" noresize=\"noresize\" frameborder=\"0\" marginwidth=\"10\" marginheight=\"0\" border=\"no\" />
<frameset cols=\"230,*\" framespacing=\"0\" border=\"0\" frameborder=\"0\" frameborder=\"no\" border=\"0\">
<frame src=\"index.php?frame=navigation\" name=\"navigation\" scrolling=\"yes\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" border=\"no\" />
<frame src=\"index.php?frame=body\" name=\"body\" scrolling=\"yes\" frameborder=\"0\" marginwidth=\"10\" marginheight=\"10\" border=\"no\" />
</frameset>
</frameset>
<noframes>
<body>
<p>Your browser does not support frames. Please get one that does!</p>
</body>
</noframes>
</html>
";
}
}
else {
header( "WWW-Authenticate: Basic realm=\"".$core["config"]["websitetitle"]."\"" );
header( "HTTP/1.0 401 Unauthorized" );
echo "<?xml version=\"1.0\" encoding=\"ISO-8859-1\"?>
<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"
\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">
<html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"en\" xml:lang=\"en\">
<head>
<title>Se Requiere Identificación!</title>
<link rev=\"made\" href=\"mailto:postmaster@localhost\" />
<style type=\"text/css\"><!--/*--><![CDATA[/*><!--*/
body { color: #000000 ; background-color: #FFFFFF ; }
a:link { color: #0000CC ; }
p, address {margin-left: 3em;}
span {font-size: smaller;}
/*]]>*/--></style>
</head>
<body>
<h1>Authorization Required!</h1>
</body>
</html>
";
exit( );
}
ob_end_flush( );
?>
Lol it's encoded using Fopo, google & you will decode easily.Quote:
Originally Posted by Auroraz
copy this index.php to your admincp folder
https://www.mediafire.com/?g6gmnqs92uc294s
Thank you for giving time to answer my post and helping me on my problem. My MuCore is now back online :thumbup1: more power to everyone and more power to Ragezone!
use this http://www.unphp.net/