How to read this php code?

Question

How to decode this string in php?

$x = "h\164tp\163\072\057\057\x70r\157\x64\x75\x63t-\x73\x65a\x72\143\150\056\x61\160i\x2e\x63\x6a\x2ec\x6f\x6d\057v\062/\160\x72\157\x64\165\x63t\x2ds\x65\141\162\143\x68\x3f";

It looks like a regex URL, but how to read what it is?

Thanks.

It looks more like a bunch of hex or perhaps a hash. Can you include any of the surrounding code to give context? — ethrbunny
– ethrbunny, Commented Jun 22, 2011 at 18:58
This is not a regex URL. This is an encoded string in another base system. e.g. hex, or something. — Steve Nguyen
– Steve Nguyen, Commented Jun 22, 2011 at 18:59
You'll find the code necessary to easily decode this in context of where it is within the page. Usually... a handful of functions defined to variables. Simply find where it decodes and echo it from there. — Brad
– Brad, Commented Jun 22, 2011 at 18:59
reads as https://product-search.api.cj.com/v2/product-search? — thetaiko
– thetaiko, Commented Jun 22, 2011 at 19:00

gen_Eric · Accepted Answer · 2011-06-22 19:02:03Z

8

just echo it out.

<?
$x = "h\164tp\163\072\057\057\x70r\157\x64\x75\x63t-\x73\x65a\x72\143\150\056\x61\160i\x2e\x63\x6a\x2ec\x6f\x6d\057v\062/\160\x72\157\x64\165\x63t\x2ds\x65\141\162\143\x68\x3f";
echo $x;

It outputs:

https://product-search.api.cj.com/v2/product-search?

edited Jun 22, 2011 at 19:02

gen_Eric

228k42 gold badges304 silver badges343 bronze badges

answered Jun 22, 2011 at 19:00

Gidon Wise

1,9161 gold badge11 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user518138 Over a year ago

Ha.., you guys are good. I am a .net programmer, new to php. Did not thought about simply echo it out.

johnsyweb · Accepted Answer · 2011-06-22 19:02:05Z

3

Print it!

% cat test.php 
#!/usr/bin/env php

<?php
$x = "h\164tp\163\072\057\057\x70r\157\x64\x75\x63t-\x73\x65a\x72\143\150\056\x61\160i\x2e\x63\x6a\x2ec\x6f\x6d\057v\062/\160\x72\157\x64\165\x63t\x2ds\x65\141\162\143\x68\x3f";
print $x;
?>

% ./test.php
https://product-search.api.cj.com/v2/product-search?

answered Jun 22, 2011 at 19:02

johnsyweb

143k26 gold badges197 silver badges253 bronze badges

Comments

Jakub Lédl · Accepted Answer · 2011-06-22 19:01:24Z

1

It is actually a string with some characters specified in hexadecimal and octal notation. Just echo it.

answered Jun 22, 2011 at 19:01

Jakub Lédl

1,8053 gold badges17 silver badges26 bronze badges

Comments

Adithya Surampudi · Accepted Answer · 2011-06-22 19:02:40Z

0

just print it, its a url

https://product-search.api.cj.com/v2/product-search?

answered Jun 22, 2011 at 19:02

Adithya Surampudi

4,4441 gold badge20 silver badges17 bronze badges

Comments

Spudley · Accepted Answer · 2011-06-22 19:05:45Z

0

Well, I created a PHP page as follows:

<?php
$x = "h\164tp\163\072\057\057\x70r\157\x64\x75\x63t-\x73\x65a\x72\143\150\056\x61\160i\x2e\x63\x6a\x2ec\x6f\x6d\057v\062/\160\x72\157\x64\165\x63t\x2ds\x65\141\162\143\x68\x3f";

print $x;
?>

and ran it.

And I got the following:

https://product-search.api.cj.com/v2/product-search?

Which means nothing to me, except that cj.com is part of Commission Junction, which is an online advertising network.

It's been deliberately obfuscated, so clearly the person who wrote it intended that you didn't notice it or understand it, and would leave it alone. I don't know the context of the question, why you're asking about it, but my guess would be that you've been hacked and someone has inserted this code (and more) into your site.

If that's the case, their aim would clearly be to gain some advertising revenue by freeloading on your site. Not particularly malicious as hacks go, but not something you'd want to be happening (especially if you don't know what kind of ads would be shown).

answered Jun 22, 2011 at 19:05

Spudley

169k39 gold badges240 silver badges309 bronze badges

1 Comment

user518138 Over a year ago

That must be it. No wonder my site sometimes acts werid recently. I got to figure out how to chean it up. Thanks.

jnbdz · Accepted Answer · 2011-06-22 19:07:07Z

0

Simple:

utf8_decode();

http://www.php.net/manual/en/function.utf8-decode.php

answered Jun 22, 2011 at 19:07

jnbdz

4,43310 gold badges55 silver badges99 bronze badges

Collectives™ on Stack Overflow

How to read this php code?

6 Answers 6

1 Comment

Comments

Comments

Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

1 Comment

Comments

Comments

Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related