Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php define( 'DVWA_WEB_PAGE_TO_ROOT', '../../' ); require_once DVWA_WEB_PAGE_TO_ROOT ..

Decoded Output download

<?php 
 
define( 'DVWA_WEB_PAGE_TO_ROOT', '../../' ); 
require_once DVWA_WEB_PAGE_TO_ROOT . 'dvwa/includes/dvwaPage.inc.php'; 
 
dvwaPageStartup( array( 'authenticated' ) ); 
dvwaDatabaseConnect(); 
$login_state = ""; 
 
if( isset( $_POST[ 'Login' ] ) ) { 
 
	$user = $_POST[ 'username' ]; 
	$user = stripslashes( $user ); 
	$user = mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $user); 
 
	$pass = $_POST[ 'password' ]; 
	$pass = stripslashes( $pass ); 
	$pass = mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $pass); 
	$pass = md5( $pass ); 
 
	$query  = "SELECT * FROM `users` WHERE user='$user' AND password='$pass';"; 
	$result = @mysqli_query($GLOBALS["___mysqli_ston"], $query) or die( '<pre>'.  mysqli_connect_error() . '.<br />Try <a href="setup.php">installing again</a>.</pre>' ); 
	if( $result && mysqli_num_rows( $result ) == 1 ) {    // Login Successful... 
		$login_state = "<h3 class=\"loginSuccess\">Valid password for '{$user}'</h3>"; 
	}else{ 
		// Login failed 
		$login_state = "<h3 class=\"loginFail\">Wrong password for '{$user}'</h3>"; 
	} 
 
} 
$messagesHtml = messagesPopAllToHtml(); 
$page = dvwaPageNewGrab(); 
 
$page[ 'title' ] .= "Test Credentials"; 
$page[ 'body' ] .= " 
		<div class=\"body_padded\"> 
			<h1>Test Credentials</h1> 
			<h2>Vulnerabilities/CSRF</h2> 
			<div id=\"code\"> 
				<form action=\"" . DVWA_WEB_PAGE_TO_ROOT . "vulnerabilities/csrf/test_credentials.php\" method=\"post\"> 
					<fieldset> 
						" . $login_state . " 
						<label for=\"user\">Username</label><br /> <input type=\"text\" class=\"loginInput\" size=\"20\" name=\"username\"><br /> 
						<label for=\"pass\">Password</label><br /> <input type=\"password\" class=\"loginInput\" AUTOCOMPLETE=\"off\" size=\"20\" name=\"password\"><br /> 
						<p class=\"submit\"><input type=\"submit\" value=\"Login\" name=\"Login\"></p> 
					</fieldset> 
				</form> 
				{$messagesHtml} 
			</div> 
		</div>
"; 
 
dvwaSourceHtmlEcho( $page ); 
 
?> 

Did this file decode correctly?

Original Code

<?php

define( 'DVWA_WEB_PAGE_TO_ROOT', '../../' );
require_once DVWA_WEB_PAGE_TO_ROOT . 'dvwa/includes/dvwaPage.inc.php';

dvwaPageStartup( array( 'authenticated' ) );
dvwaDatabaseConnect();
$login_state = "";

if( isset( $_POST[ 'Login' ] ) ) {

	$user = $_POST[ 'username' ];
	$user = stripslashes( $user );
	$user = mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $user);

	$pass = $_POST[ 'password' ];
	$pass = stripslashes( $pass );
	$pass = mysqli_real_escape_string($GLOBALS["___mysqli_ston"], $pass);
	$pass = md5( $pass );

	$query  = "SELECT * FROM `users` WHERE user='$user' AND password='$pass';";
	$result = @mysqli_query($GLOBALS["___mysqli_ston"], $query) or die( '<pre>'.  mysqli_connect_error() . '.<br />Try <a href="setup.php">installing again</a>.</pre>' );
	if( $result && mysqli_num_rows( $result ) == 1 ) {    // Login Successful...
		$login_state = "<h3 class=\"loginSuccess\">Valid password for '{$user}'</h3>";
	}else{
		// Login failed
		$login_state = "<h3 class=\"loginFail\">Wrong password for '{$user}'</h3>";
	}

}
$messagesHtml = messagesPopAllToHtml();
$page = dvwaPageNewGrab();

$page[ 'title' ] .= "Test Credentials";
$page[ 'body' ] .= "
		<div class=\"body_padded\">
			<h1>Test Credentials</h1>
			<h2>Vulnerabilities/CSRF</h2>
			<div id=\"code\">
				<form action=\"" . DVWA_WEB_PAGE_TO_ROOT . "vulnerabilities/csrf/test_credentials.php\" method=\"post\">
					<fieldset>
						" . $login_state . "
						<label for=\"user\">Username</label><br /> <input type=\"text\" class=\"loginInput\" size=\"20\" name=\"username\"><br />
						<label for=\"pass\">Password</label><br /> <input type=\"password\" class=\"loginInput\" AUTOCOMPLETE=\"off\" size=\"20\" name=\"password\"><br />
						<p class=\"submit\"><input type=\"submit\" value=\"Login\" name=\"Login\"></p>
					</fieldset>
				</form>
				{$messagesHtml}
			</div>
		</div>\n";

dvwaSourceHtmlEcho( $page );

?>

Function Calls

define 1

Variables

None

Stats

MD5 07fe558f50940700f862a5727c131f1d
Eval Count 0
Decode Time 104 ms