Kanaginternet hide their spammy links in the same way as Artio by obfuscating the code with base64 encoding. As noted in one of the earlier posts in the file sef_class.php there is a line that starts :-
eval(base64_decode('JHNlZkRpckFkbWluID0gJEdMT
When you decode this it evaluates as:-
$sefDirAdmin = $GLOBALS['mosConfig_absolute_path'] . '/administrator/components/com_sef/';
// load checksums
$license = trim(@file_get_contents($sefDirAdmin . 'signature.b64'));
$checksum = trim(@file_get_contents($sefDirAdmin . 'checksum.md5'));
$checkstr = '';
global $sefCheckA;
$sefCheckA[3] = $sefCheckA[2] = $sefCheckA[1] = $sefCheckA[0] = '';
$sefCheckA = explode('-', $license);
foreach ($sefCheckA as $id => $checkpart) {
$sefCheckA[$id] = base64_decode($checkpart);
$checkstr .= $sefCheckA[$id];
} $this->enabled &= ($checksum == $checksum);
// autumn adjustment
if ($this->enabled) {
if (!is_null($txt)) {
$txt1 = 'JoomSEF SEO by Kanga Internet (
http://www.kangainternet.com) - Web Design, Web Development, SEO, Online Marketing, Search Engine Optimisation';
$txt2 = '
Web Designers';
}
}
// autumn adjustment end
function xmlParsing ($path, $base, $index, $option)
{
global $_VERSION, $sefCheckA;
if (($path == $base) || ($path == ($base . $index)) || (@$option == 'com_frontpage')) {
// frontpage code
$_VERSION->URL .= '
Web Design | Web Developers | SEO | Online Marketing | Web Designers Melbourne';
$_VERSION->COPYRIGHT .= $sefCheckA[1];
} else {
// other page code
$_VERSION->URL .= '
Web Design | Web Developers | SEO | Online Marketing | Web Designers Melbourne';
$_VERSION->COPYRIGHT .= $sefCheckA[3];
}
}
function includeSef ($once = false)
{
global $mosConfig_absolute_path, $sefCheckA;
static $first = true;
if ($once && ! $first)
return;
$txt = file_get_contents($mosConfig_absolute_path . '/components/com_sef/sef_ext.php');
if (substr($txt, 0, 5) != '$txt = base64_encode($txt);
$txt = $sefCheckA[4] . $txt;
$detxt = base64_decode($txt);
$detxt = substr($detxt, 2, - 2);
eval($detxt);
} else {
if ($once) {
include_once ($mosConfig_absolute_path . '/components/com_sef/sef_ext.php');
} else {
include ($mosConfig_absolute_path . '/components/com_sef/sef_ext.php');
}
}
$first = false;
}