Source Code | Monirul Islam

One of my colleagues who sits just behind me was reading the most popular Bangladeshi online newspaper prothom-alo just like other day but the attention was on a strange behavior of the site for few moments. When he clicked on a link from the bottom of the home page, he was taken to that page but as well as his browser was asking him to download a php file. He downloaded it, read it and found that it was a live page from prothom-alojobs.com site. Here is the source code of that page:

<?php require_once(‘../config.php’); require_once(‘../lib/class.Db.php’); $db = new Db(hostname, username, password, databasename); function fill_spots($job_post_name, $lines) { $num_chars= strlen($job_post_name); //find number of characters; if($num_chars<=40) { $lines++; } elseif($num_chars>40 && $num_chars<=80) { $lines=$lines+2; } elseif($num_chars>80 && $num_chars<=120) { $lines=$lines+3; } elseif($num_chars>120 && $num_chars<=160) { $lines=$lines+4; } else { $lines=$lines+5; } return $lines; } ?> <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”> <html xmlns=”http://www.w3.org/1999/xhtml”> <head> <meta http-equiv=”Content-Type” content=”text/html; charset=utf-8″ /> <title>Spotlight Jobs of the week</title> <link type=”text/css” rel=”stylesheet” href=”style1.css” mce_href=”style1.css” media=”screen”/> </head> <body> <div style=”width: 220px;”> <div><img src=”images/header1.JPG” mce_src=”images/header1.JPG” width=”220″ /></div> <div id=”content”> <marquee behavior=”scroll” direction=”up” style=”padding-top:20px;” mce_style=”padding-top: 20px;” height=”170″ onmouseover=”stop()” onmouseout=”start()” scrolldelay=”1″ scrollamount=”3″> <div> <?php $query_for_total=”SELECT * FROM `spotlight_jobs` WHERE expiry_date >= CURDATE() AND status=’1′ AND `jobs_of_week` = ’1′ ORDER BY `spotlight_job_id` DESC”; $result_for_total=mysql_query($query_for_total); $total_row=@mysql_num_rows($result_for_total); $i = 0; while($row=@mysql_fetch_array($result_for_total)) { $company_name=$row['title']; $logo_url=$row['logo_url']; $job_list=explode(“,”,$row["job_id"]); $logo_url_tracker=explode(“?”,$logo_url); $i++; if(stristr($logo_url_tracker[1],”jobID”)) $link_src=”http://www.prothom-alojobs.com/static_pages/spotlight_jobs/”.$row["spotlight_job_id"].”/”.$row["logo_url"]; else $link_src=$logo_url; ?> <div class=”spotlight_start”> <div class=”logo”><a target=”_blank” href=”<? echo $link_src; ?>”><img src=”http://www.prothom-alojobs.com/Admin/company_logo_upload/<? echo $row['spotlight_job_id'];?>-<? echo $row['employer_id'];?>/<? echo $row['logo'];?>”></a></div> <div class=”spotlight_job_details”> <h1><?=$company_name;?></h1> <ul> <?php $lines=0; $total_lines=2; $more_jobs=0;//more? yes….1 //more? no…..0 //inner while begins while(key($job_list) !==null) { $curn_id=current($job_list); $q3=”select job_title,no_of_vacancies from jobs where job_id=’”.$curn_id.”‘”; $res3=mysql_query($q3); $row3=mysql_fetch_array($res3); $curn_post=$row3["job_title"]; //echo “post”.$post.” ”; $num=$row3["no_of_vacancies"]; //echo “vacancies”.$num.” ”; $link_src_title=”http://www.prothom-alojobs.com/static_pages/spotlight_jobs/”.$row["spotlight_job_id"].”/”.$row["title_url"]; $present_line=fill_spots($curn_post,$lines); ////////////// if($present_line>$total_lines ) { $more_jobs=1; break; } elseif($present_line==$total_lines) { $nxt_id=next($job_list); $len=strlen($nxt_id); if( $len>=1 ) { $more_jobs=1; break; } else { echo ” <li><a target=\”_blank\” href=”\” mce_href=”\”"”.$link_src_title.”\” >”.$curn_post.”</a></li> ”; break; } } else { echo ” <li><a target=\”_blank\” href=”\” mce_href=”\”"”.$link_src_title.”\” >”.$curn_post.”</a></li> ”; $lines=$present_line; } next($job_list); }// inner while ends ?> </ul> <?php if ($more_jobs==1) // echo “<a target=\”_blank\” href=”\” mce_href=”\”"”.$link_src_title.”\” class=\”\” >+ more jobs</a>”; ?> </div> </div> <?php } ?> </div> </marquee> </div> <!— End Content –> <!— End Content –> <div><img src=”images/fotter1.JPG” mce_src=”images/fotter1.JPG” width=”220″ /></div> </div> </body> </html>

The peculiarity of this problem is, it was only happening in the chrome browser of his PC. Certainly this is not a browser specific issue but still I checked mine and his chrome version. The version mismatched. He was using version 7.0.517.44 but mine was over 8. Then I checked in different PCs (all was unfortunately version over 8 ) where chrome was installed, nowhere it was happening except his PC. At that moment my belief was like this might be a chrome version 7.0.517.44 specific issue. Then while we were planning to update his browser, we noticed that that is already updated automatically to version 8 and was waiting to be restarted. After restarting the browser, that problem was not happening anymore. So my belief became stronger although at the same time I believe it cannot be a browser specific issue.

Finally I downloaded the chrome version 7.0.517.44 and tried to regenerate it without any luck.

Monirul Islam

Stay alert to threats, take steps to protect.

Tag Archives: Source Code

Prothom-alo source code revealed