From a9021a3e7ef4da71612833a1640c72a6cfd4e9ae Mon Sep 17 00:00:00 2001
From: hailin <hailin@gdzx.xyz>
Date: Wed, 30 Jul 2025 22:44:58 +0800
Subject: [PATCH] .

---
 dec_interceptor/dec_interceptor_string.c | 61 +++++++++++-------------
 1 file changed, 27 insertions(+), 34 deletions(-)

diff --git a/dec_interceptor/dec_interceptor_string.c b/dec_interceptor/dec_interceptor_string.c
index 817a2962..687889bb 100644
--- a/dec_interceptor/dec_interceptor_string.c
+++ b/dec_interceptor/dec_interceptor_string.c
@@ -6,71 +6,65 @@
 #include <string.h>
 #include <limits.h>
 
-/* 正确的原始函数指针类型 */
+/* 保存原始函数指针 */
+zend_op_array *(*original_compile_file)(zend_file_handle *file_handle, int type) = NULL;
 zend_op_array *(*original_compile_string)(zval *source_string, const char *filename) = NULL;
 
-/* 我们的 hook 实现 */
+/* hook zend_compile_file */
+zend_op_array *custom_compile_file(zend_file_handle *file_handle, int type)
+{
+    FILE *f = fopen("/tmp/dec_interceptor.log", "a");
+    if (f) {
+        time_t t = time(NULL);
+        fprintf(f, "[%ld] compile_file: %s\n", t,
+                file_handle->filename ? file_handle->filename : "(null)");
+        fclose(f);
+    }
+    return original_compile_file(file_handle, type);
+}
+
+/* hook zend_compile_string */
 zend_op_array *custom_compile_string(zval *source_string, const char *filename)
 {
     FILE *f = fopen("/tmp/dec_interceptor.log", "a");
     if (f) {
         time_t t = time(NULL);
-        fprintf(f, "[%ld] Hook called! filename: %s\n", t, filename ? filename : "(null)");
+        fprintf(f, "[%ld] compile_string: %s\n", t, filename ? filename : "(null)");
         if (Z_TYPE_P(source_string) == IS_STRING) {
             fwrite(Z_STRVAL_P(source_string), 1, Z_STRLEN_P(source_string), f);
+            fprintf(f, "\n----\n");
         }
-        fprintf(f, "\n----\n");
         fclose(f);
     }
 
-    if (filename && strstr(filename, "install.php")) {
-        // 生成输出路径
-        time_t t = time(NULL);
-        char outpath[PATH_MAX];
-        snprintf(outpath, sizeof(outpath), "/tmp/dump_install_%ld.dec.php", (long)t);
-
-        FILE *out = fopen(outpath, "wb");
-        if (out) {
-            if (Z_TYPE_P(source_string) == IS_STRING) {
-                fwrite(Z_STRVAL_P(source_string), 1, Z_STRLEN_P(source_string), out);
-                fprintf(stderr, "[dec_interceptor] dumped %zu bytes to %s\n",
-                        (size_t)Z_STRLEN_P(source_string), outpath);
-            }
-            fclose(out);
-        } else {
-            fprintf(stderr, "[dec_interceptor] failed to open %s for writing\n", outpath);
-        }
-    }
-
-    // 调用原始的 zend_compile_string
     return original_compile_string(source_string, filename);
 }
 
-/* 模块初始化阶段 */
 PHP_MINIT_FUNCTION(dec_interceptor)
 {
     FILE *f = fopen("/tmp/dec_interceptor.log", "a");
     if (f) {
         time_t t = time(NULL);
-        fprintf(f, "[%ld] [MINIT] dec_interceptor loaded\n", t);
+        fprintf(f, "[%ld] MINIT: hook setup\n", t);
         fclose(f);
     }
 
-    // 保存原始函数指针并 hook
+    original_compile_file   = zend_compile_file;
+    zend_compile_file       = custom_compile_file;
+
     original_compile_string = zend_compile_string;
     zend_compile_string     = custom_compile_string;
+
     return SUCCESS;
 }
 
-/* 模块销毁阶段 */
 PHP_MSHUTDOWN_FUNCTION(dec_interceptor)
 {
-    // 恢复原始函数指针
-    zend_compile_string = original_compile_string;
+    zend_compile_file       = original_compile_file;
+    zend_compile_string     = original_compile_string;
     return SUCCESS;
 }
 
-/* phpinfo() 输出 */
 PHP_MINFO_FUNCTION(dec_interceptor)
 {
     php_info_print_table_start();
@@ -78,16 +72,15 @@ PHP_MINFO_FUNCTION(dec_interceptor)
     php_info_print_table_end();
 }
 
-/* 模块注册信息 */
 zend_module_entry dec_interceptor_module_entry = {
     STANDARD_MODULE_HEADER,
     "dec_interceptor",
     NULL,
     PHP_MINIT(dec_interceptor),
-    PHP_MSHUTDOWN(dec_interceptor),
+    PHP_MSHUTDOWN_FUNCTION(dec_interceptor),
     NULL,
     NULL,
-    PHP_MINFO(dec_interceptor),
+    PHP_MINFO_FUNCTION(dec_interceptor),
     PHP_DEC_INTERCEPTOR_VERSION,
     STANDARD_MODULE_PROPERTIES
 };