<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>ls /proc &#187; decode</title>
	<atom:link href="http://www.lsproc.com/blog/tag/decode/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.lsproc.com/blog</link>
	<description>lsproc.com</description>
	<lastBuildDate>Fri, 18 Nov 2011 09:22:52 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>nginx userid 模块客户端 cookie 解码</title>
		<link>http://www.lsproc.com/blog/nginx_userid_decode/</link>
		<comments>http://www.lsproc.com/blog/nginx_userid_decode/#comments</comments>
		<pubDate>Mon, 12 Apr 2010 01:59:32 +0000</pubDate>
		<dc:creator>lostsnow</dc:creator>
				<category><![CDATA[Program&Database]]></category>
		<category><![CDATA[base64]]></category>
		<category><![CDATA[decode]]></category>
		<category><![CDATA[nginx]]></category>
		<category><![CDATA[php]]></category>
		<category><![CDATA[ruby]]></category>

		<guid isPermaLink="false">http://www.lsproc.com/blog/?p=387</guid>
		<description><![CDATA[转载时请标明文章原始出处和作者信息, 作者: lostsnow.http://www.lsproc.com/blog/nginx_userid_decode/ 在网上看到用 ruby 解码的一段程序 http://forum.nginx.org/read.php?2,52592,52592 &#62; cookie_uid = &#34;0Cvz4ktwVPEdbRcMAwMFAg==&#34;; cc = cookie_uid.unpack(&#039;m*&#039;).first; rr = cc.split(&#34;&#34;).map{&#124;c&#124; c[0].to_i}.inject([]) {&#124;v,s&#124; v.push sprintf(&#34;%02X&#34;, s); v; }.values_at(3, 2, 1, 0, 7, 6, 5, 4, 11, 10, 9, 8, 15, 14, 13, 12).join(&#34;&#34;) =&#62; &#8230; <a href="http://www.lsproc.com/blog/nginx_userid_decode/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>转载时请标明文章原始出处和作者信息, 作者: <a href="http://www.lsproc.com/blog/">lostsnow</a>.<br /><a href="http://www.lsproc.com/blog/nginx_userid_decode/">http://www.lsproc.com/blog/nginx_userid_decode/</a></p>
<p>在网上看到用 ruby 解码的一段程序<br />
<a href="http://forum.nginx.org/read.php?2,52592,52592">http://forum.nginx.org/read.php?2,52592,52592</a></p>
<pre class="brush: ruby">
&gt; cookie_uid = &quot;0Cvz4ktwVPEdbRcMAwMFAg==&quot;; cc = cookie_uid.unpack(&#039;m*&#039;).first; rr = cc.split(&quot;&quot;).map{|c| c[0].to_i}.inject([]) {|v,s| v.push sprintf(&quot;%02X&quot;, s); v; }.values_at(3, 2, 1, 0, 7, 6, 5, 4, 11, 10, 9, 8, 15, 14, 13, 12).join(&quot;&quot;)
=&gt; &quot;E2F32BD0F154704B0C176D1D02050303&quot;
</pre>
<p>我用 PHP 写了一个</p>
<pre class="brush: php">
&lt;?php
function nginx_userid_decode($str)
{
    $str_unpacked =  unpack(&#039;h*&#039;, base64_decode(str_replace(&#039; &#039;, &#039;+&#039;, $str)));
    $str_split = str_split(current($str_unpacked), 8);
    $str_map = array_map(&#039;strrev&#039;, $str_split);
    $str_dedoded = strtoupper(implode(&#039;&#039;, $str_map));

    return $str_dedoded;
}

// uid=8380A8C09A7E8C4B0A112CC202030303
echo nginx_userid_decode(&#039;wKiAg0uMfprCLBEKAwMDAg==&#039;);
</pre>
<p>update:</p>
<blockquote><p>
<strong>如果 base64 后的编码中含有 '+' , 在 url 传递中或是 $_COOKIE 数组读取中会被转换为空格</strong>
</p></blockquote>
<p>-- EOF --</p>
<h2  class="related_post_title">Related Posts</h2><ul class="related_post"><li>2010-05-21 -- <a href="http://www.lsproc.com/blog/nginx_php_pathinfo_securit/" title="Nginx/PHP 文件类型错误解析漏洞：fix_pathinfo">Nginx/PHP 文件类型错误解析漏洞：fix_pathinfo</a> (2)</li><li>2010-03-08 -- <a href="http://www.lsproc.com/blog/use_ob_flush_on_nginx_fastcgi/" title="nginx+factcgi 下使用 ob_flush">nginx+factcgi 下使用 ob_flush</a> (0)</li><li>2009-03-29 -- <a href="http://www.lsproc.com/blog/nginx_ssl_config/" title="Nginx SSL 配置">Nginx SSL 配置</a> (23)</li><li>2008-10-23 -- <a href="http://www.lsproc.com/blog/nginx_rewrite_param/" title="nginx rewrite 的一些参数  ">nginx rewrite 的一些参数  </a> (1)</li><li>2008-06-15 -- <a href="http://www.lsproc.com/blog/lighttpd_phpfastcgi_config/" title="lighttpd + PHP(fastcgi) 配置">lighttpd + PHP(fastcgi) 配置</a> (0)</li></ul>]]></content:encoded>
			<wfw:commentRss>http://www.lsproc.com/blog/nginx_userid_decode/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

