hailin
/
php-8.0.30-src
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

.

This commit is contained in:
hailin 2025-07-31 15:47:03 +08:00
parent 667219526f
commit d3e7d2c981
1 changed files with 45 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

50
dec_interceptor/dec_interceptor.c
View File

@ -8,19 +8,59 @@ zend_op_array *(*prev_compile_file)(zend_file_handle *file_handle, int type) = N
zend_op_array *(*prev_compile_string)(zend_string *source_string, const char *filename) = NULL; zend_op_array *(*prev_compile_string)(zend_string *source_string, const char *filename) = NULL;
void (*prev_execute_ex)(zend_execute_data *execute_data) = NULL; void (*prev_execute_ex)(zend_execute_data *execute_data) = NULL;
// zend_op_array *hook_compile_file(zend_file_handle *file_handle, int type)
// {
// FILE *f = fopen("/tmp/dec_interceptor.log", "a");
// if (f) {
// fprintf(f, "[%ld] hook_compile_file called\n", (long)time(NULL));
// if (file_handle && file_handle->filename) {
// fprintf(f, "[%ld] file_handle->filename = %s\n", (long)time(NULL), file_handle->filename);
// }
// fclose(f);
// }
// return prev_compile_file ? prev_compile_file(file_handle, type) : NULL;
// }
zend_op_array *hook_compile_file(zend_file_handle *file_handle, int type) zend_op_array *hook_compile_file(zend_file_handle *file_handle, int type)
{ {
FILE *f = fopen("/tmp/dec_interceptor.log", "a"); FILE *log = fopen("/tmp/dec_interceptor.log", "a");
if (f) { if (log) {
fprintf(f, "[%ld] hook_compile_file called\n", (long)time(NULL)); fprintf(log, "[%ld] hook_compile_file called\n", (long)time(NULL));
if (file_handle && file_handle->filename) { if (file_handle && file_handle->filename) {
fprintf(f, "[%ld] file_handle->filename = %s\n", (long)time(NULL), file_handle->filename); fprintf(log, "[%ld] file_handle->filename = %s\n", (long)time(NULL), file_handle->filename);
} }
fclose(f);
} }
// 只针对 install.php 做 hook
if (file_handle && file_handle->filename &&
strstr(file_handle->filename, "install.php") != NULL &&
file_handle->handle.fp) {
// 尝试 dump 前2000字节
char buffer[2049];
memset(buffer, 0, sizeof(buffer));
// 先保存当前文件指针位置（一般应为0）
long pos = ftell(file_handle->handle.fp);
// 读取前2000字节
size_t n = fread(buffer, 1, 2000, file_handle->handle.fp);
// 复位文件指针
fseek(file_handle->handle.fp, pos, SEEK_SET);
if (log) {
fprintf(log, "[DECRYPTED_SOURCE install.php]\n%.*s\n", (int)n, buffer);
}
}
if (log) fclose(log);
// 调用原始编译器
return prev_compile_file ? prev_compile_file(file_handle, type) : NULL; return prev_compile_file ? prev_compile_file(file_handle, type) : NULL;
} }
zend_op_array *hook_compile_string(zend_string *source_string, const char *filename) zend_op_array *hook_compile_string(zend_string *source_string, const char *filename)
{ {
FILE *f = fopen("/tmp/dec_interceptor.log", "a"); FILE *f = fopen("/tmp/dec_interceptor.log", "a");